Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Information about network security

0
votes
1answer
359 views

Anonymity in China

I am planning a trip to China soon and would like to be pretty much invisible while on the internet. Does TOR keep me safe from the "Internet Watchers?" I am not planning any illegal or immoral ...
1
vote
1answer
75 views

TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?

I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS? Even if it is running on ...
6
votes
2answers
341 views

Can somebody force my Tor circuits to always start from his “guard node”, to access my traffic?

The first node after "my browser" is always the same. I am worried to see that even when asking for "new identity" or "new circuit", it restarts always by the same IP address in France. I have no ...
3
votes
1answer
74 views

TOR asking for donations?

I downloaded new TOR and got an ad on the top of the browser stating "Please support TOR DONATE" with a pic of Cory Doctorow on the top of the page. I never saw TOR advertise before. Is this the ...
3
votes
1answer
1k views

block tor2web, onion.city,cab, .link etc

How would i block tor2web and proxies like that from my tor hidden services? Like a nginx rule or something to make sure no one can access my tor hidden service through these services.
0
votes
0answers
504 views

Is there a limit in the number of connections?

When I use Tor as a socks5 proxy for my applications, is there a limit in the number of connections I can perform to other hidden services (addresses.onion)? I am developing an application to check ...
-1
votes
1answer
78 views

Mozilla now hosting Tor relay nodes

What is the deal with allowing Mozilla to host Tor relay nodes? They say their contribution will help to greatly expand and improve the Tor network, yet despite all the recent spin on the truth about ...
5
votes
1answer
3k views

Use Tor browser as non-root Linux

If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user? Basically have the browser run ...
1
vote
0answers
9k views

Why is video/mp4 and video/webm blocked by noscript in TBB?

Is it safe to disable the default blocking? Why was it added/turned on? Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling ...
3
votes
0answers
50 views

Cannot get SE login form with tor browser [closed]

I don't understand why some sites refuse to allow tor users to log in. I can see why some might resent anonymity, but you aren't anonymous after you log in. But my issue today is that I can't get a ...
0
votes
2answers
142 views

Can you run a VM under a tor network? [closed]

Can I setup on the VM host to redirect all my VM guest networking over Tor?
1
vote
1answer
147 views

Is there a way to check vulnerability of an exit node before choosing it?

Or does it even matter? I connected to almost a dozen paths and ran the "shields up" port probe at GRC.com All but three had most ports in stealth mode. (Most had SSH, HTTP, and HTTPS connections ...
1
vote
1answer
147 views

How do I ensure my email client (Thunderbird) is using Tor?

How do I direct my email client (Thunderbird) to use Tor when sending and receiving? Or am I not understanding this correctly?
1
vote
3answers
664 views

Is it good or bad idea to use tor always?

Am I less or more secure, if I use tor when I do not need anonimity? If a web site does not support https, and I need to download a program from there, is it better to use tor, or not? Is it good ...
1
vote
1answer
181 views

Security for relay on Home network

I want to host a relay to help out the network. I am looking into the possibility of doing it on my home network. Two concerns have come up during my research. The first is I would potentially be ...
1
vote
0answers
369 views

Am using Tor now w/a VPN. How did MSN pinpoint my location? Screenshot

What is going on? Am using Tor Browser along with "Strong VPN." Just signed out of my Hotmail which, at first, showed U.K. stories on its homepage. But now that I'm about to sign back in, my real ...
0
votes
1answer
236 views

Restrict firewall by port and host

What is a list of host/port combinations to get the onion proxy (a.k.a. the Tor client) working securely? This is about host/port combinations, not simply ports, as already described in the FAQ. An ...
2
votes
2answers
118 views

Why am I redirected to a certain port on a website while using Tor?

While browsing websites using Tor (on tails), it sometimes happens that instead of www.website.org, www.website.org:8123 is displayed in the URL bar. In this case the website is not working. When I ...
4
votes
2answers
335 views

Google knows my language when I use Tor [closed]

When I go to google.com (without being logged in) it switches to google.de (I am from Germany), even though I am using Tor. How is this information still available to google? Tor Browser Bundle 5.0.2....
1
vote
0answers
2k views

Is it safe to run Avast with Tor

Is it safe to run Avast with Tor? I currently use Avast, but I've understood that Avast, as other anti-virus programs, send and log a lot of data about any browser that is being used. Are there some ...
7
votes
2answers
1k views

How can I download Tor within China to get over the Great Firewall?

I am trying to download Tor within China to use as VPN. However, I cannot access the Tor download page using the mainstream internet inside of China. I am blocked by the Great Firewall, and recent ...
3
votes
1answer
122 views

Does Tor have any protection against bandwidth misuse?

Let's say someone runs 100 Tor instances on their machine and with their high speed internet connection -> download huge volumes of data through all of those instances. Are there any mechanisms ...
0
votes
2answers
158 views

Does enabling java let my ISP find out what I am doing?

As the title says: if I enable javascript can my ISP know what I am doing? As in do I become transparent (somehow) to my ISP? I am only interested to know the ISP side, as the tor FAQ (&co) are ...
3
votes
2answers
1k views

What metadata does Tor leak to my ISP?

It is wellknown that an ISP can see when an end user is using Tor. What exactly can it infer by looking at the Tor traffic? Specifically Can the ISP infer Tor bandwidth usage, i.e. actively ...
4
votes
1answer
132 views

How does Tor guarantee server integrity?

As I understood, when a client connects through Tor he connects to the central Tor servers, picks up three (or more) public keys, connects to the first, makes a chain to the second and makes a chain ...
1
vote
1answer
1k views

Are there any effective traffic generation tools

One of the tactics discussed as a measure to defend against traffic correlation/timing attacks, is to have your Tor client sending traffic on a consistent basis. For example: If a client was always ...
0
votes
1answer
131 views

Not able to access .onoin sites - because I left tbb open for a while?

I've seen a few questions asking/commenting about the availability of .onion sites. I've never tried to use them before today adn I was surprised to see that the first 4 or 5 I couldn't access. All ...
1
vote
1answer
152 views

Email hack warning when using tor

I've an email account which I never visited outside Tor/Tails. Recently, I got a warning from the email provider about suspicious activity. While I'm inspecting the email's activity logs, I found out ...
2
votes
2answers
109 views

How secure are hidden services port bindings?

On my system I have a secure service that is bound to localhost for commands. I do not want it accessible to Tor. It's bound to one port, lets say 876. I am running a hidden service that binds to one ...
1
vote
0answers
200 views

Hidden service private key chain

Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
2
votes
2answers
209 views

Can I track other users on Tor?

I'm an admin on a Windows 8.1 computer and I want to know if I can see what another user is doing on Tor. Would I just use Microsoft Family Safety? I know that the government can spy on Tor, but can I ...
4
votes
3answers
186 views

Is this a security flaw?

Now, this seems almost too obvious, so I assume I must be missing something, but I figure I should run it by the experts first to see. Hypothetical scenario: At 5:18pm, a user using the Tor network ...
1
vote
2answers
855 views

Installed new Tor and now search engine is DISCONNECT search instead of Startpage

I just reinstalled Tor and the default search engine is not Startpage, it is DISCONNECT Search. Did I install a bogus Tor browser? And if not, why the change from Startpage?
3
votes
2answers
3k views

safe to use tails on deskop computer while using wifi connection on cell phone?

Basically I have a router which allows wired and wifi connections. I'm using Tails on my desktop computer through a wired connection. We have cell phones that then accesses the wifi on the same ...
2
votes
3answers
226 views

Is it safe to use Tor if you share the internet with other people?

I share the internet with three, sometimes four, other people. If I use Tor, am I safe, or do the other people in my house compromise my Tor usage/security/etc.?
3
votes
1answer
222 views

Can bookmarks set in the TBB (or Firefox) be used for Fingerprinting? Is it safe to use bookmarks? [duplicate]

Bookmarks are (for me) a handy feature to keep track of notable sites in the internet. Does the Tor Browser Bundle (and does that differ from the way Firefox behaves?) offer the bookmarks saved ...
1
vote
1answer
102 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...
1
vote
1answer
159 views

Safe to open a flash file offline?

I've read that opening files using certain programs such as Flash or Word can automatically send out information from your computer which may compromise anonymity when using Tor. What I'm wondering ...
2
votes
1answer
356 views

Are there tor exit nodes (country specific) that are not listed in the tor node list?

Sometimes I have to use Tor as a proxy server to let myself appear in a specific country. This can be done by editing the torrc. Problem is: Some websites are blocking traffic from Tor. I presume ...
1
vote
1answer
19 views

Should I not be using MobileMouse with Tor?

Wondering if the application will deanonymize web by communication with my iphone on clearnet ip.
2
votes
2answers
1k views

How is data encrypted and decrypted in onion routing?

I read that onion proxy adds a layer of abstraction for each onion router in a route,and each onion router just removes a layer of encryption then does onion proxy knows about all onion routers in the ...
6
votes
2answers
26k views

How do I import bookmarks into Tor Browser?

How do I import bookmarks to Tor Browser? I did it before, but they are gone and now I cannot find the "import bookmarks" function I used last time.
1
vote
1answer
2k views

Is there any way to tell how safe/secure an onion site is, or if it is a honeypot?

Black book claims to be the Facebook of the dark Web. Is it a legitimate/safe site (assuming that users don't divulge any personal details), or is it a feeder site for nefarious things like Pink Meth? ...
6
votes
3answers
943 views

Tor does not connect----The probable cause: The security system CYBEROAM

My college has installed a security system called Cyberoam. Now they have blocked many things including youtube, break, etc., as a counter measure, I tried to find a way to circumvent this security ...
1
vote
1answer
78 views

How do I know Tor does not publish my identifiable information in to the public? [closed]

Can anyone tell me how and where can I check to make sure Tor is secured, without leak? And Tor does not publish my identifiable login information in to the public.
3
votes
1answer
743 views

How does Tor defend against Sybil attacks?

Sybil attacks target the weaknesses in the reputation system. How does Tor deal with such attacks? Recently, the Lizard Squad tried to take control of the Tor network by creating a large number of ...
2
votes
0answers
11 views

Hidden services and relay on the same machine [duplicate]

Are there security issues with running the hidden service and non-exit relay on the same Tor instance?
3
votes
1answer
201 views

Is it feasible and rational to combine the Tails package and Whonix package to improve the anonymity of the client? And, how to implement it?

Is it feasible and rational to combine the capability of Tails package and Whonix package to improve the anonymity and security of the client? And if so, how one may implement it?
1
vote
2answers
651 views

How secure is Tor? [closed]

I'm a newbie at this and just wanted to know how secure Tor is. I know that sounds a bit vague but any info will be appreciated. Thanks.
5
votes
0answers
329 views

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I use Whonix. I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...