Questions tagged [security]
Information about network security
487
questions
0
votes
1
answer
76
views
And if DDoS attacks could enhance the anonymity of the Tor network?
The most effective approach for an attacker would be to establish Tor routing and send packets to trigger a chain reaction across 3 or more relays.
Now, couldn’t these attacks potentially be an ...
- 5,915
5
votes
5
answers
23k
views
Is using Tor on Windows dangerous?
One of my friends keeps telling me that it's useless to use Tor on Windows, as Windows is full of key-loggers, Trojans and other malware, and if they want to identify me it will be easy because of ...
0
votes
1
answer
66
views
Am I surfing the deep web right now? [closed]
How do I know Tor is working on my device? Is there any way I can know that my whatsapp is routed via Tor?
0
votes
1
answer
53
views
Implications of using applications on Tor
There is an advice instructing to use compiled apps instead of webapps, since the former can be checked against checksums, unlike the latter which is susceptible to Javascript code injection. E.g: use ...
CommunityBot
- 1
1
vote
2
answers
1k
views
Hosting Site as Hidden Service
Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service?
I do not expect there to be many users (...
CommunityBot
- 1
1
vote
2
answers
240
views
Being identified as running Tor exit relay. Constant capchas, security checks
I recently realized that while using TOR (TOR bundle) that a site that wouldn't block out anyone because they use Tor, has Cloudflare service stating that they need to check the security of my browser ...
- 5,915
0
votes
1
answer
99
views
Can a Hidden Service track you the same way an exit node can?
imagine if the onion service decided to be the malicious exit node itself. It’s not (Exit node) but could it travel back through its relays (possibly even skip) to the rendezvous point that track you ...
- 5,915
0
votes
1
answer
194
views
How can I disable Tor's automatic IP circuit renewal process?
I have an issue with this process when trying to log in or authenticate to a site where I only want to use the VPN and don't want the IP to change automatically at that time, as it interferes with the ...
- 3,112
2
votes
1
answer
76
views
How do TOR nodes select the CircID's when creating, or extending, a circuit?
I am coding my own version of TOR and I am trying to set up circuit management. I looked at the TOR spec and it says:
To prevent CircID collisions, when one node sends a CREATE/CREATE2
cell to ...
- 3,112
0
votes
1
answer
237
views
How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only
How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only (via PAC file) in a "normal" browser?
I am aware that there is risk that .onion sites
can still fingerprint me and/or ...
- 5,915
2
votes
2
answers
811
views
Is Tor browser Compromised?
When using StartPage I get asked to complete a capcha. Why is Startpage asking for a Capcha? Is StartPage identifying or spying on me? Is StartPage compromised or is it safe?
0
votes
2
answers
3k
views
How do I use tor network to access my email account
Is there anyway to use tor network to securely access me email accounts like with onion?
I use tor browser to access my email account and sent my self an email to another email service and it showed ...
CommunityBot
- 1
3
votes
3
answers
632
views
Are there tor exit nodes (country specific) that are not listed in the tor node list?
Sometimes I have to use Tor as a proxy server to let myself appear in a specific country. This can be done by editing the torrc.
Problem is: Some websites are blocking traffic from Tor. I presume ...
- 5,915
0
votes
1
answer
197
views
Tor Downloads/ Anonymity
I had a question regarding Downloading files Using the Tor software . Lets say you are a journalist and you were on some website on TOR (like a .onion) and you needed to download standard MP4/ PNG/ ...
- 5,915
0
votes
1
answer
100
views
Security vulnerabilities for http login of self-hosted nextcloud server over tor?
After setting up my own Nextcloud server over tor, using a private .onion domain, and http, I am unsure about the security implications of using http in this setup.
I learned one can buy a .onion ...
- 153
1
vote
3
answers
2k
views
Where can I find the new Tails 3.2 checksum?
I'm looking for the new Tails 3.2 checkums (md5, sha1, sha256, etc).
It seems that there is no way to find it in its own site. Even googling it brings not much information. So there is something I'm ...
- 101
1
vote
1
answer
9k
views
Tails/Tor Browser not connecting to the internet
I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
CommunityBot
- 1
0
votes
2
answers
3k
views
Viewing videos using Tor Browser & anonimity
In some security guides listed that when you watching videos via Tor your real IP gets or might be disclosed.
One of them says "You should turn off media.play-stand-alone and peerconnection....
0
votes
1
answer
109
views
What's more safe in mode "Safer"?
From about:preferences in Security:
Safer
Disables website features that are often dangerous, causing some sites to lose functionality.
JavaScript is disabled on non-HTTPS sites.
Some fonts and math ...
CommunityBot
- 1
0
votes
0
answers
80
views
Hidden service setup
Planning on starting my own hidden service but would want some advice regarding the security/privacy. Looking for someone with experience to be able to tell me from A to Z (from nothing to finished ...
1
vote
0
answers
135
views
Does "safer" security setting on Tor disable javascript on HTTP .onion sites?
In TOR manual we have the following:
Safer (...) JavaScript is disabled on all non-HTTPS sites; some fonts
and math symbols are disabled; audio and video (HTML5 media) are
click-to-play.
I was ...
- 11
2
votes
2
answers
196
views
Tor safe when taking future in to account?
With quantum computing becoming better by the day I have a few questions.
How viable and likely is it that an adversary to saves all tor traffic in order to decrypt it at a later date?
When ...
0
votes
1
answer
60
views
Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?
Goal: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are ...
- 5,915
0
votes
2
answers
273
views
Does enabling java let my ISP find out what I am doing?
As the title says: if I enable javascript can my ISP know what I am doing? As in do I become transparent (somehow) to my ISP? I am only interested to know the ISP side, as the tor FAQ (&co) are ...
- 179
0
votes
3
answers
777
views
Why doesn't Tor browser block HTTP by default?
Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
- 5,915
5
votes
2
answers
2k
views
How to create a private exit node?
I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
- 1
0
votes
1
answer
158
views
JavaScript exception when using "Safest" security profile in Tor
I'm using the "Safest" security profile in Tor (accessible via about:preferences).
Here's one point in the description for that profile:
JavaScript is disabled by default on all sites. (...
- 8,561
0
votes
2
answers
213
views
Can Tor connection be intercepted/tampered by exit nodes?
Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP ...
- 105
1
vote
0
answers
97
views
Isn't deanonymization by having the entry and exit nodes in the same country a threat?
Consider the following scenario.
I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes.
I am trying to call for demonstrations and criticize policies on ...
- 11
1
vote
2
answers
438
views
Firefox Multi-Account Containers on Tor
Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
- 5,915
0
votes
2
answers
524
views
Does connecting to a normal website using tor work the same way as connecting to a hidden website?
When you connect to a normal website using tor, is the process of connecting to it the same as when you connect to a hidden website?
First you connect to the entry node, then middle node then exit ...
- 5,915
0
votes
2
answers
255
views
Is it safe to use Nipe with a Raspberry Pi?
I'm not a Perl coder and hoped Tor users (more familiar with proper tor application and usage) could weigh in on the implementation and overall usage of such a tool.
Would anyone recommend against ...
CommunityBot
- 1
0
votes
2
answers
712
views
is it safe to download Tor browser from other browser
1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the ...
CommunityBot
- 1
0
votes
1
answer
5k
views
Accessing deep web with virtual machine on Windows
I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?
CommunityBot
- 1
0
votes
1
answer
91
views
Is there a safe way to access this site
" https://thewest.com.au/digital-edition?utm_source=SSW&utm_medium=Referral&utm_campaign=digital-edition&utm_term=read-the-digital-edition&utm_content=top-nav "
I am a paid ...
CommunityBot
- 1
0
votes
1
answer
115
views
How do Linux global brokers
I have a Linux VPS.
I need to go outside and I try to proxy
export http_proxy="http://127.0.0.1:8123"
export https_proxy="https://127.0.0.1:8123"
But not all agents.
I have an nginx that needs ...
CommunityBot
- 1
1
vote
1
answer
855
views
How to close tails firewall port?
I need to closing two or more open firewall ports in tails. How can I send the command to do this?
CommunityBot
- 1
0
votes
1
answer
406
views
TorButton Security settings: Define custom level
Is there a way to define a custom level in the security settings?
For example I'd like to use the "safer" preset but allow Javascript on HTTP. The reason is that I use a separate JS blocker which ...
CommunityBot
- 1
0
votes
1
answer
669
views
security on tails over usb stick
my question concern an attack with following prerequisites:
1) an home router hacked
2) tails installed on usb stick
3) the attacker has got a 0day on linux netfilter stack
the attacker get in on ...
CommunityBot
- 1
0
votes
2
answers
1k
views
What makes Onion sites more safe than regular html sites?
What exactly makes an .onion site more secure than a regular html based website, except that it is "hidden" and can't be taken down easily. For a user term, am I more safe when I visit a onion site ...
CommunityBot
- 1
0
votes
1
answer
768
views
Send emails to external addresses
I would want to send emails to external addresses from an external web site (for example [email protected] or .org etc) from my mail2tor account, but I received the next e-mail:
Subject: ...
CommunityBot
- 1
1
vote
1
answer
287
views
Does Tor Work With Secret Agent
Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
CommunityBot
- 1
3
votes
1
answer
8k
views
Is there a recommended and/or compatible antivirus software and/or tool available for Tor Browser Bundle
Specifically, for window OS, is there a recommended and/or compatible antivirus software and/or tool one can use to increase the security of the system. The point being, if there is a malware on the ...
0
votes
1
answer
759
views
tor log shows ignoring ExcludeNodes?
Tor Log says:
[WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes.
and
[NOTICE] Opened Socks listener on 127.0.0.1:9150
It minds that my tor, conexion/router have been hacked?
To put you ...
CommunityBot
- 1
0
votes
1
answer
83
views
Prevention of SYN flooding
I am curious how Tor can prevent SYN flooding attacks? From my understanding for a TCP handshake first a SYN has to be sent to the receiver. So why is it not possible to spam various SYN requests over ...
- 3,112
0
votes
3
answers
303
views
Is there a way a website can identify me when connected to it via Orbot?
When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service ...
CommunityBot
- 1
0
votes
2
answers
641
views
I want to hear opinions about the chain: VPN1==>TOR==>VPN2==>TOR (using Kodachi Linux with USB + Kodachi Linux with Virtualbox)
I would like to hear your opinion about this connection chain, what can you say anonymously and whether it is secure.
Boot Linux Kodachi in Live mode from USB
Turn on a reliable VPN1
After that I ...
CommunityBot
- 1
0
votes
1
answer
144
views
What is more safe - keep network connected or do connect-disconnect
If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected?
First option looks better because physically disconnected, but multiple connect-disconnect can cause ...
CommunityBot
- 1
0
votes
1
answer
115
views
AntiVirus Software - Potential security risk?
I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor.
I recently read about a free Anti-Virus software sold its Users browsing data. ...
CommunityBot
- 1
0
votes
2
answers
228
views
What precautions should I take if I want to use Tor to hide my traffic from my University?
I am student at university and use university internet. I am interested in using Tor to prevent my university from seeing what sites I visit and what I am doing on those sites. As I understand it now, ...
CommunityBot
- 1