Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0
votes
1answer
615 views

Since Tor runs “sandboxed” if there is an infection thru Tor can you just close the browser and kill the infection?

I have Sandboxie I use with my firefox when looking in dangerous areas of the regular web and wanted to know if i can use it with Tor? This lets me simply close the browser if there is an infection ...
1
vote
0answers
345 views

XSS errors with recent update

I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :(( One site I used to visit often was mail.com, where I ...
1
vote
1answer
539 views

Please review my connection log errors

I am using the current version of Tails. I more often than not get the warning icon at the bottom left of the connection window telling me that the log file has been copied to the clip board. I will ...
0
votes
2answers
282 views

Exit node security from Man-in-the-middle attacks

Apparently, any exit relay may steal some private data from HTTP requests (like auth data / cookies / credit card information), if the connection itself is not encrypted. Does HTTPS provide a ...
1
vote
3answers
999 views

How to easily verify certificates on .onion versions of clearnet sites?

According to various sources (like this question) DuckDuckGo has an onion site. However, I can't easily find any mention of it on their clearnet site (but I stumbled across a special search result ...
3
votes
2answers
88 views

How is CVE-2015-7547 impacting Tor/Tails/Tor Browser?

If this is critically impacting Tails, for example, why hasn't there been an immediate upgrade to apply the patch?
1
vote
2answers
48 views

Multiple download sites for verification

I want to download Tails and verify by comparing multiple downloads from different sites. Can anyone point me to a list of these sites please? If I go to tor project.org there is just one download ...
2
votes
2answers
156 views

Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?

(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.) I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
1
vote
1answer
2k views

Tor circuit display in Tor Browser - how can it?

If all the nodes in a Tor circuit aren't supposed to know about each other, how can the Tor Browser display the whole circuit? If it knows all the addresses in the chain, can't someone else pull that ...
8
votes
1answer
5k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
0
votes
1answer
389 views

Anonymity in China

I am planning a trip to China soon and would like to be pretty much invisible while on the internet. Does TOR keep me safe from the "Internet Watchers?" I am not planning any illegal or immoral ...
1
vote
1answer
75 views

TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?

I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS? Even if it is running on ...
6
votes
2answers
347 views

Can somebody force my Tor circuits to always start from his “guard node”, to access my traffic?

The first node after "my browser" is always the same. I am worried to see that even when asking for "new identity" or "new circuit", it restarts always by the same IP address in France. I have no ...
3
votes
1answer
82 views

TOR asking for donations?

I downloaded new TOR and got an ad on the top of the browser stating "Please support TOR DONATE" with a pic of Cory Doctorow on the top of the page. I never saw TOR advertise before. Is this the ...
3
votes
1answer
1k views

block tor2web, onion.city,cab, .link etc

How would i block tor2web and proxies like that from my tor hidden services? Like a nginx rule or something to make sure no one can access my tor hidden service through these services.
0
votes
0answers
562 views

Is there a limit in the number of connections?

When I use Tor as a socks5 proxy for my applications, is there a limit in the number of connections I can perform to other hidden services (addresses.onion)? I am developing an application to check ...
-1
votes
1answer
80 views

Mozilla now hosting Tor relay nodes

What is the deal with allowing Mozilla to host Tor relay nodes? They say their contribution will help to greatly expand and improve the Tor network, yet despite all the recent spin on the truth about ...
5
votes
1answer
3k views

Use Tor browser as non-root Linux

If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user? Basically have the browser run ...
1
vote
0answers
10k views

Why is video/mp4 and video/webm blocked by noscript in TBB?

Is it safe to disable the default blocking? Why was it added/turned on? Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling ...
3
votes
0answers
52 views

Cannot get SE login form with tor browser [closed]

I don't understand why some sites refuse to allow tor users to log in. I can see why some might resent anonymity, but you aren't anonymous after you log in. But my issue today is that I can't get a ...
0
votes
2answers
163 views

Can you run a VM under a tor network? [closed]

Can I setup on the VM host to redirect all my VM guest networking over Tor?
1
vote
1answer
154 views

Is there a way to check vulnerability of an exit node before choosing it?

Or does it even matter? I connected to almost a dozen paths and ran the "shields up" port probe at GRC.com All but three had most ports in stealth mode. (Most had SSH, HTTP, and HTTPS connections ...
1
vote
1answer
151 views

How do I ensure my email client (Thunderbird) is using Tor?

How do I direct my email client (Thunderbird) to use Tor when sending and receiving? Or am I not understanding this correctly?
1
vote
3answers
713 views

Is it good or bad idea to use tor always?

Am I less or more secure, if I use tor when I do not need anonimity? If a web site does not support https, and I need to download a program from there, is it better to use tor, or not? Is it good ...
1
vote
1answer
187 views

Security for relay on Home network

I want to host a relay to help out the network. I am looking into the possibility of doing it on my home network. Two concerns have come up during my research. The first is I would potentially be ...
1
vote
0answers
384 views

Am using Tor now w/a VPN. How did MSN pinpoint my location? Screenshot

What is going on? Am using Tor Browser along with "Strong VPN." Just signed out of my Hotmail which, at first, showed U.K. stories on its homepage. But now that I'm about to sign back in, my real ...
0
votes
1answer
252 views

Restrict firewall by port and host

What is a list of host/port combinations to get the onion proxy (a.k.a. the Tor client) working securely? This is about host/port combinations, not simply ports, as already described in the FAQ. An ...
2
votes
2answers
119 views

Why am I redirected to a certain port on a website while using Tor?

While browsing websites using Tor (on tails), it sometimes happens that instead of www.website.org, www.website.org:8123 is displayed in the URL bar. In this case the website is not working. When I ...
4
votes
2answers
339 views

Google knows my language when I use Tor [closed]

When I go to google.com (without being logged in) it switches to google.de (I am from Germany), even though I am using Tor. How is this information still available to google? Tor Browser Bundle 5.0.2....
1
vote
0answers
2k views

Is it safe to run Avast with Tor

Is it safe to run Avast with Tor? I currently use Avast, but I've understood that Avast, as other anti-virus programs, send and log a lot of data about any browser that is being used. Are there some ...
7
votes
2answers
1k views

How can I download Tor within China to get over the Great Firewall?

I am trying to download Tor within China to use as VPN. However, I cannot access the Tor download page using the mainstream internet inside of China. I am blocked by the Great Firewall, and recent ...
3
votes
1answer
123 views

Does Tor have any protection against bandwidth misuse?

Let's say someone runs 100 Tor instances on their machine and with their high speed internet connection -> download huge volumes of data through all of those instances. Are there any mechanisms ...
0
votes
2answers
160 views

Does enabling java let my ISP find out what I am doing?

As the title says: if I enable javascript can my ISP know what I am doing? As in do I become transparent (somehow) to my ISP? I am only interested to know the ISP side, as the tor FAQ (&co) are ...
3
votes
2answers
2k views

What metadata does Tor leak to my ISP?

It is wellknown that an ISP can see when an end user is using Tor. What exactly can it infer by looking at the Tor traffic? Specifically Can the ISP infer Tor bandwidth usage, i.e. actively ...
4
votes
1answer
138 views

How does Tor guarantee server integrity?

As I understood, when a client connects through Tor he connects to the central Tor servers, picks up three (or more) public keys, connects to the first, makes a chain to the second and makes a chain ...
1
vote
1answer
1k views

Are there any effective traffic generation tools

One of the tactics discussed as a measure to defend against traffic correlation/timing attacks, is to have your Tor client sending traffic on a consistent basis. For example: If a client was always ...
0
votes
1answer
133 views

Not able to access .onoin sites - because I left tbb open for a while?

I've seen a few questions asking/commenting about the availability of .onion sites. I've never tried to use them before today adn I was surprised to see that the first 4 or 5 I couldn't access. All ...
1
vote
1answer
159 views

Email hack warning when using tor

I've an email account which I never visited outside Tor/Tails. Recently, I got a warning from the email provider about suspicious activity. While I'm inspecting the email's activity logs, I found out ...
2
votes
2answers
111 views

How secure are hidden services port bindings?

On my system I have a secure service that is bound to localhost for commands. I do not want it accessible to Tor. It's bound to one port, lets say 876. I am running a hidden service that binds to one ...
1
vote
0answers
214 views

Hidden service private key chain

Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
2
votes
2answers
220 views

Can I track other users on Tor?

I'm an admin on a Windows 8.1 computer and I want to know if I can see what another user is doing on Tor. Would I just use Microsoft Family Safety? I know that the government can spy on Tor, but can I ...
4
votes
3answers
189 views

Is this a security flaw?

Now, this seems almost too obvious, so I assume I must be missing something, but I figure I should run it by the experts first to see. Hypothetical scenario: At 5:18pm, a user using the Tor network ...
1
vote
2answers
869 views

Installed new Tor and now search engine is DISCONNECT search instead of Startpage

I just reinstalled Tor and the default search engine is not Startpage, it is DISCONNECT Search. Did I install a bogus Tor browser? And if not, why the change from Startpage?
3
votes
2answers
3k views

safe to use tails on deskop computer while using wifi connection on cell phone?

Basically I have a router which allows wired and wifi connections. I'm using Tails on my desktop computer through a wired connection. We have cell phones that then accesses the wifi on the same ...
2
votes
3answers
235 views

Is it safe to use Tor if you share the internet with other people?

I share the internet with three, sometimes four, other people. If I use Tor, am I safe, or do the other people in my house compromise my Tor usage/security/etc.?
3
votes
1answer
224 views

Can bookmarks set in the TBB (or Firefox) be used for Fingerprinting? Is it safe to use bookmarks? [duplicate]

Bookmarks are (for me) a handy feature to keep track of notable sites in the internet. Does the Tor Browser Bundle (and does that differ from the way Firefox behaves?) offer the bookmarks saved ...
1
vote
1answer
103 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...
1
vote
1answer
165 views

Safe to open a flash file offline?

I've read that opening files using certain programs such as Flash or Word can automatically send out information from your computer which may compromise anonymity when using Tor. What I'm wondering ...
2
votes
1answer
375 views

Are there tor exit nodes (country specific) that are not listed in the tor node list?

Sometimes I have to use Tor as a proxy server to let myself appear in a specific country. This can be done by editing the torrc. Problem is: Some websites are blocking traffic from Tor. I presume ...
1
vote
1answer
19 views

Should I not be using MobileMouse with Tor?

Wondering if the application will deanonymize web by communication with my iphone on clearnet ip.