Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Information about network security

1
vote
2answers
73 views

Tor and Folder Lock

I'm writing a novel, and one of my characters is into some illegal activities on the web. He's ultra-paranoid about security, so uses Tor...but he doesn't want anyone who might snoop in his computer ...
5
votes
1answer
297 views

Which one is preferable :electrum or blockchain.info in the sense of anonymity?

What is better option, electrum or blockchain.info when using Tor, regarding anonymity? I read here: http://www.coindesk.com/bitcoin-tor-anonymity-can-busted-2500-month/ that it's possible to ...
2
votes
1answer
90 views

Tor Browser Security

Immediately after downloading the Tor browser I went to the options page and saw that the 'Block dangerous and deceptive content' box under 'Deceptive Content and Dangerous Software Protection' was ...
1
vote
1answer
531 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1
vote
1answer
4k views

Tails/Tor Browser not connecting to the internet

I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
1
vote
1answer
353 views

How to close tails firewall port?

I need to closing two or more open firewall ports in tails. How can I send the command to do this?
0
votes
1answer
168 views

Brave Browser's Bundled Tor reveals browser through search, is this a privacy issue?

Description When using private window Tor mode I was surprised to see that Brave passes a browser identifier in the url of the search. It seems having &t=brave in the url makes identifying the ...
0
votes
1answer
91 views

Does deanonymization only affect the current session?

Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a ...
0
votes
1answer
157 views

It it safe to use Tor in Windows safe-mode with networking?

Is it even safer to use Tor in Windows safe-mode with networking than using Tor in Windows normal mode..
0
votes
1answer
948 views

Accessing deep web with virtual machine on Windows

I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?
0
votes
1answer
64 views

Missing History

Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters). What about Tor V1 addresses? What was its specification or why wasn't it used much or at all? Example: ...
0
votes
1answer
229 views

TorButton Security settings: Define custom level

Is there a way to define a custom level in the security settings? For example I'd like to use the "safer" preset but allow Javascript on HTTP. The reason is that I use a separate JS blocker which ...
0
votes
1answer
285 views

Tor Onions active on Tail , does Electrum use that proxy?

When I open onion relay on Tails , and then open Electrum Wallet on LiveCD Tails Does that Electrum connected with Tor proxy/network? Hope some users would help me to explain this things
0
votes
1answer
360 views

security on tails over usb stick

my question concern an attack with following prerequisites: 1) an home router hacked 2) tails installed on usb stick 3) the attacker has got a 0day on linux netfilter stack the attacker get in on ...
0
votes
1answer
154 views

How to secure my torrelays against hijacking (debian), bounty $50

I'm running some tor exitrelays with rsyslog off. Does this disable ALL loggin? If no how I disable ALL loggin? Next to that I want to secure those against hijacking as good as possible. So I was ...
0
votes
1answer
212 views

Does Tor Work With Secret Agent

Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
0
votes
1answer
87 views

How do Linux global brokers

I have a Linux VPS. I need to go outside and I try to proxy export http_proxy="http://127.0.0.1:8123" export https_proxy="https://127.0.0.1:8123" But not all agents. I have an nginx that needs ...
0
votes
1answer
937 views

Password protecting the Tor browser

I'd like to password protect the Tor browser on my computer so that others cannot open it without a password. Is there a simple way of doing so? I am on a Mac using OSX. So far, I'm thinking the best ...
0
votes
1answer
520 views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
0
votes
1answer
188 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
0
votes
1answer
483 views

Send emails to external addresses

I would want to send emails to external addresses from an external web site (for example contact@mywebsite.com or .org etc) from my mail2tor account, but I received the next e-mail: Subject:   ...
5
votes
0answers
329 views

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I use Whonix. I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...
3
votes
0answers
284 views

DNS over HTTPS and Tor

Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
2
votes
0answers
169 views

Building an Apparmor Profile

I generated an apparmor profile for the tor binary that comes bundled in Ricochet: # Last Modified: Sun Apr 2 2017 #include <tunables/global> /ricochet/*-ricochet/tor { #include <...
2
votes
0answers
112 views

What purpose does congestion control achieve, and how does it work?

I am trying to understand exactly how the different solutions for the congestion control mechanism work and what purpose they achieve. With "the solutions" I mean the circuit level throttling and the ...
2
votes
0answers
166 views

sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network

I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a ...
1
vote
0answers
63 views

Despite your own stupidity, how can Tor Browser fail?

Assuming there are no mistakes done on your own side, (how) can Tor Browser still fail? Is it really possible you get connected to three relays that are in the hands of someone bad? Are there any ...
1
vote
0answers
49 views

can one tab “look” at it's nighbor tab and 'read' its data?

I am on Linux. I use Tor mainly to browse on high(er) risk sites, like torrents and such. Would it be safe to run my gmail account on one tab (of Tor) and on the other tab, to get into a "risky ...
1
vote
0answers
68 views

RSA keys explanations

I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
1
vote
0answers
87 views

is it safe to rename firefox.exe?

OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right ...
1
vote
0answers
127 views

Hacking Tor in my spy/thriller novel

Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router? Reason: I’m an aspiring writer, working on a spy-...
1
vote
0answers
250 views

Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?

I have followed steps in this article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites ...
1
vote
0answers
71 views

How can I set the firewall rules on Iptables without them getting deleted?

I am sending command line commands to the Iptables. Once I set these rules I connect to my router. on connecting all the rules I just add is removed and only the original firewall rules that tails has ...
1
vote
0answers
337 views

XSS errors with recent update

I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :(( One site I used to visit often was mail.com, where I ...
1
vote
0answers
9k views

Why is video/mp4 and video/webm blocked by noscript in TBB?

Is it safe to disable the default blocking? Why was it added/turned on? Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling ...
1
vote
0answers
369 views

Am using Tor now w/a VPN. How did MSN pinpoint my location? Screenshot

What is going on? Am using Tor Browser along with "Strong VPN." Just signed out of my Hotmail which, at first, showed U.K. stories on its homepage. But now that I'm about to sign back in, my real ...
1
vote
0answers
2k views

Is it safe to run Avast with Tor

Is it safe to run Avast with Tor? I currently use Avast, but I've understood that Avast, as other anti-virus programs, send and log a lot of data about any browser that is being used. Are there some ...
1
vote
0answers
199 views

Hidden service private key chain

Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
1
vote
0answers
3k views

Reason behind “clearnet warning” when posting URL links on onion websites

When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit Clearnet Warning along with the URL. What is ...
1
vote
0answers
46 views

Tor time-size attack

What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...
1
vote
0answers
22 views

Do secure channels provide a good means for asking bridges in order to stay annonymous

After going through this post Do utilization of bridges and/or Pluggable Transports bridges hinder anonymity? I ask is there any secure communication channel through which we can receive bridges as ...
1
vote
0answers
39 views

Security leak in TBB 3.6.2! Leaking information about installed fonts

No matter what I do, what add-on I installed up to now. On chrome://stopfingerprinting/content/common/options.html my TBB 3.6.2 reveals exactly what fonts I've installed, making me obviously ...
1
vote
0answers
82 views

OpenSSL ROP hack/backdoor(OBVIOUS)/bug

Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL member/programer Andy Polyakov- still a problem in Tor code?
0
votes
0answers
11 views

TOR crashed and left other USB thumb drive encrypted

I was browsing with TOR and I had a second USB drive plugged into the computer, I have previously saved data to that drive in other sessions but I did not write anything to the second USB during the ...
0
votes
0answers
32 views

Orbot shut down! In logs said “Definitely notthe fbi” What does that mean?

My Orbot App Stopped is Bootleg even though it was 100%. After it shit down it said " Definitely Not The Fbi" What Does this mean? Im assuming a warning. I Shut the process down. Cleared data and cut ...
0
votes
0answers
45 views

How does Tor protects from the list of Digital Finger Print

I have heard that Tor protects users from sites that try to fingerprint browsing history with its integration of NoScript. But it's not completely secure as some researchers claims. Does Tor really ...
0
votes
0answers
194 views

Can't access NoScript from browser page

Tor Browser 8.5a10 NoScript 10.2.4 MacOS 10.13.6 (High Sierra) The NoScript menu is missing from the address bar, so I cannot allow/disallow scripts on the web page that I am currently on. I can ...
0
votes
0answers
182 views

Another tor version, noscript is still OFF by default!

Is there any way to fix this? Every time I start tor browser I have to go to the settings and untick all 8 boxes from the default settings. It's a waste of time, and shouldn't be necessary for a ...
0
votes
0answers
70 views

How do I load Tor-Browser with Wayland?

Firefox functions in Fedora/CentOS with Wayland, Tor-Browser should too. No Xorg necessary. How do I launch Tor-Browser under Wayland? Thank you!
0
votes
0answers
504 views

Is there a limit in the number of connections?

When I use Tor as a socks5 proxy for my applications, is there a limit in the number of connections I can perform to other hidden services (addresses.onion)? I am developing an application to check ...