Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Information about network security

1
vote
1answer
406 views

Tails firewall rules with static IP configuration

Tails firewall rules with static IP configuration Please note that this question is in relation to the connection it self. The unencrypted part of the connection not the part of the connection that ...
0
votes
1answer
125 views

Can I permenantly remove package from Tails?

I just deployed tails on a flash drive, and were busy tweaking it. Is it possible to persistently remove some stock software packages from my copy of tails? I tried to apt-get remove them, but they ...
2
votes
2answers
332 views

Security of Tor bridges and Captcha

Tor's current CAPTCHA implementation is easily crackable through bots - whether through paid human labour or automatic algorithms with 99.8% accuracy[1]. Although the algorithm by Google is for ...
1
vote
1answer
434 views

How can I bridge Wlan to Ethernet through tor?

Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network? By the way I want to use Linux for doing that. So please don't send me Windows ...
1
vote
1answer
813 views

Does tails have a penetrable firewall?

Does tails have a penetrable firewall? Currently tails firewall has a very complicated structure to it. It is difficult to say if the firewall is penetrable or not. One might think it is not when it ...
1
vote
1answer
74 views

Could Someone attack tails firmware through tails?

Could Someone attack tails firmware through tails? I have noticed that some applications on OS does not require administrative privilege. Such is the browser add-on such as the one that can be used ...
1
vote
1answer
591 views

Using Orbot to mask network traffic

I have a problem with my ISP. I recently changed to a new 'chat-only' provider, which allows only chat applications (i.e. whatsapp, messenger) to be used on his network. Is there any way to use ...
1
vote
0answers
36 views

Using VPN to hide TOR [duplicate]

I've read discussions where some people advocate starting VPN first, then TOR and other recommend start TOR, then run the VPN. Whichever way I connect, if I go to whoer.net or stilllistener.com to ...
0
votes
1answer
87 views

Suspcious IMAP traffic between my machine and a Tor entry node

I was running Wireshark and noticed that my machine sends IMAP requests to 37.187.22.131, which, according to my TorBrowser, is the entry node I'm connected to. Likewise, my machine seems to be ...
2
votes
2answers
7k views

Connection is not secure randomly occurring? [closed]

Here's a couple images of what I'm concerned about. It's directly to the left of the box where you type the website in it looks like an "i" in a circle. http://imgur.com/a/1ACrW
0
votes
2answers
233 views

Weird Message in Orbot logs?

I see something like the following line in log: WARN: Recived 404 Status Code "Not Found" from server [IP:Port] while fetching "/tor/keys/fp/[hash refrence here]" Two very intresting things come ...
2
votes
1answer
572 views

Could someone hack a tails device based on the firmware in it?

Could someone hack a tails device based on the firmware in it? I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
1
vote
1answer
149 views

Does tails work with Mini free Laptops

Does tails work well with mini free laptops. Are there any issues? Such as in proper shutdown. Can you boot Tails from DVD on mini free? Can you boot Tails from USB on mini free? Answer this ...
1
vote
1answer
527 views

Virus Total Online Scanner Says Tor Has a Trojan

I tested Tor Browser with the Virus Total Online Scanner Website and got the message: This is the Trojan by Rising - Trojan.DisguisedAsDocument/Heur!1.A502-8a37qDgkMnL (Cloud) Is this correct, ...
0
votes
1answer
581 views

Open ports in Tor Browser vs other browsers

I checked for open ports using GRC Shields Up website, obtaining a perfect stealth score on the following platforms and browsers (latest version of each one up to 06/06/2016): Windows 7: IE, Chrome, ...
1
vote
1answer
76 views

TOR Anonymity Query [closed]

It is my understanding that TOR was actually created by the CIA, either directly or through some non-governmental entity. I get this information from a reliable source that has a background with the ...
1
vote
1answer
2k views

Is loading wl driver for macbook wifi at start up safe on Tails OS?

I managed to install wl driver on Tails OS and wanted to make it load at boot automatically. To achieve that, I configured the persistent volume to save APT PACKAGES and APT LISTS. Then I edited the ...
1
vote
1answer
211 views

setup done on my windows vps for my .onion website [closed]

hi i was wondering what best security settings you guys could share and how do i setup for my webserver. running window 2008 r2. i do not want any leaking if possible. i understand windows vps is not ...
12
votes
2answers
182 views

Does Tor latency leak location information?

This might be a general question about any anonymizing service, but I'm new here and curious about, but not super familiar with, Tor. Suppose there's a service that engages in some handshake with ...
5
votes
2answers
401 views

What would happen when multiple servers are having the same onion hostname?

I'm concern about uniqueness of the onion sites in terms of finding the right onion hostname and publishing it. How I can be guaranteed that my onion site will be the only one in Tor network with the ...
1
vote
2answers
120 views

Adding a blacklist for known scam sites?

It seems that the issue of fake/spoofed onion sites is becoming more and more of a problem. The situation is such that on some more popular sites an incorrect keystroke may expose the user to ...
0
votes
1answer
2k views

Anonymity on TOR : DisconnectMe versus DuckDuckGo

IMPORTANT QUESTION ABOUT SECURITY - Anonymity on TOR : DisconnectMe versus DuckDuckGo As far as I know DuckDuckGo doesn't keep yoour data but it doesn't mean you are invisible on Internet when you ...
2
votes
0answers
69 views

Tor Browser issue with DuckDuckGo [duplicate]

I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option. I don't know how to remove that to stay on my "...
7
votes
2answers
240 views

Why do Tor hidden service operators bother with SSL/TLS encryption?

Tor hidden services have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal ...
1
vote
1answer
138 views

What are the differences between security levels?

Tor browser has different security levels. What are these and what are the main differences between them?
1
vote
1answer
10 views

Why the set_gid bit in /var/log/tor/?

On debian-based systems, the tor logging directory has the permissions $ ls -ald /var/log/tor/ drwxr-s--- ... /var/log/tor/ Why is this so? Is this a security vulnerability?
0
votes
2answers
101 views

Latest scandals about Tor

I have stumbled upon certain articles that state that imply that Tor no longer safe. For example, This article and this and even this post by Mozilla imply that there is some backdoor known by the ...
0
votes
2answers
321 views

Possibility with malicious endnode, SSL Strip?

I am wondering about the security with TOR, if an end node setup a proxy like Burp Suite and replaced the certificate, does it mean the end node can still see all the packets that had passed through ...
0
votes
1answer
815 views

Is a server's response to a Tor browser query encrypted by the Tor nodes when it transits the Tor circuit in the reverse direction?

If a Tor browser makes a request of a server on the Internet, it will be encrypted several times by the Tor browser before it leaves the client. The destination server, however, will receive only the ...
2
votes
2answers
622 views

When logging into Facebook with Tor: “Your computer needs to be cleaned”

Can't log into Facebook using Tor. They want to install software to 'clean' your computer. I've run 3 different malware programs of my own, plus, I logged into Facebook using another browser and ...
1
vote
1answer
332 views

Is it useful to install DNSCrypt-proxy with Tor?

Is it useful to install DNSCrypt-proxy when we already have Tor? Does the ISP knows my internet queries when I use Tor?
2
votes
1answer
1k views

Deleting Tor bookmarks

Long story short : I don't like the idea of adding bookmarks with Tor, but I accidentally created one by hitting the shortcut. For my knowledge and to prevent further mistakes like this one, where ...
3
votes
2answers
10k views

Security implications of running tails in Virtual machine

So I was suggested to use Tails on a VirtualBox software. But as I was going thru the documentation, I saw this security limitation "Both the host operating system and the virtualization software are ...
1
vote
1answer
359 views

How safe is Tor from drive-by malware?

How do ensure that one's exit node will not send one JS malware (like the forbes.com drive-by download attack?)
0
votes
1answer
154 views

Can a website read out my MAC address using JavaScript even though I use Tor?

If I use a Tor to visit a site with enabled JavaScript, can this website find out my MAC address, monitor serial number, the serial number of the processor etc?
1
vote
1answer
81 views

Add-on for saving in .mht file format

I'd like to save web pages in .mht file format using Tor Browser (https://addons.mozilla.org/en-US/firefox/addon/mozilla-archive-format/) But installing additional addons or plugins into the Tor ...
2
votes
1answer
222 views

ISP & LEO tracking on Tor

I realize this will sound like I am beating a dead horse; however, I've read many, many threads and comments on this topic and am not quiet satisfied. Maybe I'm being too specific and need a more ...
0
votes
1answer
483 views

Send emails to external addresses

I would want to send emails to external addresses from an external web site (for example contact@mywebsite.com or .org etc) from my mail2tor account, but I received the next e-mail: Subject:   ...
3
votes
2answers
751 views

Why does Tails use an insecure memory wiping process

When I shutdown Tails, various standard messages appear including the statement that if the system does not power-off, then it is likely that the memory wiping process has failed. More curiously, I ...
1
vote
1answer
47 views

Security Risk or Not? [closed]

Given the server foot-printing that MIT has recently discovered, and the fact that we know that they have been found to be in cahoots with at least one intelligence service (i.e. The FBI) Whats to say ...
0
votes
1answer
581 views

Since Tor runs “sandboxed” if there is an infection thru Tor can you just close the browser and kill the infection?

I have Sandboxie I use with my firefox when looking in dangerous areas of the regular web and wanted to know if i can use it with Tor? This lets me simply close the browser if there is an infection ...
1
vote
0answers
338 views

XSS errors with recent update

I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :(( One site I used to visit often was mail.com, where I ...
1
vote
1answer
507 views

Please review my connection log errors

I am using the current version of Tails. I more often than not get the warning icon at the bottom left of the connection window telling me that the log file has been copied to the clip board. I will ...
0
votes
2answers
270 views

Exit node security from Man-in-the-middle attacks

Apparently, any exit relay may steal some private data from HTTP requests (like auth data / cookies / credit card information), if the connection itself is not encrypted. Does HTTPS provide a ...
1
vote
3answers
900 views

How to easily verify certificates on .onion versions of clearnet sites?

According to various sources (like this question) DuckDuckGo has an onion site. However, I can't easily find any mention of it on their clearnet site (but I stumbled across a special search result ...
3
votes
2answers
87 views

How is CVE-2015-7547 impacting Tor/Tails/Tor Browser?

If this is critically impacting Tails, for example, why hasn't there been an immediate upgrade to apply the patch?
1
vote
2answers
48 views

Multiple download sites for verification

I want to download Tails and verify by comparing multiple downloads from different sites. Can anyone point me to a list of these sites please? If I go to tor project.org there is just one download ...
2
votes
2answers
148 views

Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?

(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.) I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
1
vote
1answer
2k views

Tor circuit display in Tor Browser - how can it?

If all the nodes in a Tor circuit aren't supposed to know about each other, how can the Tor Browser display the whole circuit? If it knows all the addresses in the chain, can't someone else pull that ...
7
votes
1answer
5k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....