Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0 votes
1 answer
76 views

And if DDoS attacks could enhance the anonymity of the Tor network?

The most effective approach for an attacker would be to establish Tor routing and send packets to trigger a chain reaction across 3 or more relays. Now, couldn’t these attacks potentially be an ...
5 votes
5 answers
23k views

Is using Tor on Windows dangerous?

One of my friends keeps telling me that it's useless to use Tor on Windows, as Windows is full of key-loggers, Trojans and other malware, and if they want to identify me it will be easy because of ...
0 votes
1 answer
66 views

Am I surfing the deep web right now? [closed]

How do I know Tor is working on my device? Is there any way I can know that my whatsapp is routed via Tor?
0 votes
1 answer
53 views

Implications of using applications on Tor

There is an advice instructing to use compiled apps instead of webapps, since the former can be checked against checksums, unlike the latter which is susceptible to Javascript code injection. E.g: use ...
1 vote
2 answers
1k views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1 vote
2 answers
240 views

Being identified as running Tor exit relay. Constant capchas, security checks

I recently realized that while using TOR (TOR bundle) that a site that wouldn't block out anyone because they use Tor, has Cloudflare service stating that they need to check the security of my browser ...
0 votes
1 answer
99 views

Can a Hidden Service track you the same way an exit node can?

imagine if the onion service decided to be the malicious exit node itself. It’s not (Exit node) but could it travel back through its relays (possibly even skip) to the rendezvous point that track you ...
0 votes
1 answer
194 views

How can I disable Tor's automatic IP circuit renewal process?

I have an issue with this process when trying to log in or authenticate to a site where I only want to use the VPN and don't want the IP to change automatically at that time, as it interferes with the ...
2 votes
1 answer
76 views

How do TOR nodes select the CircID's when creating, or extending, a circuit?

I am coding my own version of TOR and I am trying to set up circuit management. I looked at the TOR spec and it says: To prevent CircID collisions, when one node sends a CREATE/CREATE2 cell to ...
0 votes
1 answer
237 views

How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only

How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only (via PAC file) in a "normal" browser? I am aware that there is risk that .onion sites can still fingerprint me and/or ...
2 votes
2 answers
811 views

Is Tor browser Compromised?

When using StartPage I get asked to complete a capcha. Why is Startpage asking for a Capcha? Is StartPage identifying or spying on me? Is StartPage compromised or is it safe?
0 votes
2 answers
3k views

How do I use tor network to access my email account

Is there anyway to use tor network to securely access me email accounts like with onion? I use tor browser to access my email account and sent my self an email to another email service and it showed ...
3 votes
3 answers
632 views

Are there tor exit nodes (country specific) that are not listed in the tor node list?

Sometimes I have to use Tor as a proxy server to let myself appear in a specific country. This can be done by editing the torrc. Problem is: Some websites are blocking traffic from Tor. I presume ...
0 votes
1 answer
197 views

Tor Downloads/ Anonymity

I had a question regarding Downloading files Using the Tor software . Lets say you are a journalist and you were on some website on TOR (like a .onion) and you needed to download standard MP4/ PNG/ ...
0 votes
1 answer
100 views

Security vulnerabilities for http login of self-hosted nextcloud server over tor?

After setting up my own Nextcloud server over tor, using a private .onion domain, and http, I am unsure about the security implications of using http in this setup. I learned one can buy a .onion ...
1 vote
3 answers
2k views

Where can I find the new Tails 3.2 checksum?

I'm looking for the new Tails 3.2 checkums (md5, sha1, sha256, etc). It seems that there is no way to find it in its own site. Even googling it brings not much information. So there is something I'm ...
1 vote
1 answer
9k views

Tails/Tor Browser not connecting to the internet

I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
0 votes
2 answers
3k views

Viewing videos using Tor Browser & anonimity

In some security guides listed that when you watching videos via Tor your real IP gets or might be disclosed. One of them says "You should turn off media.play-stand-alone and peerconnection....
0 votes
1 answer
109 views

What's more safe in mode "Safer"?

From about:preferences in Security: Safer Disables website features that are often dangerous, causing some sites to lose functionality. JavaScript is disabled on non-HTTPS sites. Some fonts and math ...
0 votes
0 answers
80 views

Hidden service setup

Planning on starting my own hidden service but would want some advice regarding the security/privacy. Looking for someone with experience to be able to tell me from A to Z (from nothing to finished ...
1 vote
0 answers
135 views

Does "safer" security setting on Tor disable javascript on HTTP .onion sites?

In TOR manual we have the following: Safer (...) JavaScript is disabled on all non-HTTPS sites; some fonts and math symbols are disabled; audio and video (HTML5 media) are click-to-play. I was ...
2 votes
2 answers
196 views

Tor safe when taking future in to account?

With quantum computing becoming better by the day I have a few questions. How viable and likely is it that an adversary to saves all tor traffic in order to decrypt it at a later date? When ...
0 votes
1 answer
60 views

Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?

Goal: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are ...
0 votes
2 answers
273 views

Does enabling java let my ISP find out what I am doing?

As the title says: if I enable javascript can my ISP know what I am doing? As in do I become transparent (somehow) to my ISP? I am only interested to know the ISP side, as the tor FAQ (&co) are ...
0 votes
3 answers
777 views

Why doesn't Tor browser block HTTP by default?

Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
5 votes
2 answers
2k views

How to create a private exit node?

I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
0 votes
1 answer
158 views

JavaScript exception when using "Safest" security profile in Tor

I'm using the "Safest" security profile in Tor (accessible via about:preferences). Here's one point in the description for that profile: JavaScript is disabled by default on all sites. (...
0 votes
2 answers
213 views

Can Tor connection be intercepted/tampered by exit nodes?

Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP ...
1 vote
0 answers
97 views

Isn't deanonymization by having the entry and exit nodes in the same country a threat?

Consider the following scenario. I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes. I am trying to call for demonstrations and criticize policies on ...
1 vote
2 answers
438 views

Firefox Multi-Account Containers on Tor

Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
0 votes
2 answers
524 views

Does connecting to a normal website using tor work the same way as connecting to a hidden website?

When you connect to a normal website using tor, is the process of connecting to it the same as when you connect to a hidden website? First you connect to the entry node, then middle node then exit ...
0 votes
2 answers
255 views

Is it safe to use Nipe with a Raspberry Pi?

I'm not a Perl coder and hoped Tor users (more familiar with proper tor application and usage) could weigh in on the implementation and overall usage of such a tool. Would anyone recommend against ...
0 votes
2 answers
712 views

is it safe to download Tor browser from other browser

1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the ...
0 votes
1 answer
5k views

Accessing deep web with virtual machine on Windows

I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?
0 votes
1 answer
91 views

Is there a safe way to access this site

" https://thewest.com.au/digital-edition?utm_source=SSW&utm_medium=Referral&utm_campaign=digital-edition&utm_term=read-the-digital-edition&utm_content=top-nav " I am a paid ...
0 votes
1 answer
115 views

How do Linux global brokers

I have a Linux VPS. I need to go outside and I try to proxy export http_proxy="http://127.0.0.1:8123" export https_proxy="https://127.0.0.1:8123" But not all agents. I have an nginx that needs ...
1 vote
1 answer
855 views

How to close tails firewall port?

I need to closing two or more open firewall ports in tails. How can I send the command to do this?
0 votes
1 answer
406 views

TorButton Security settings: Define custom level

Is there a way to define a custom level in the security settings? For example I'd like to use the "safer" preset but allow Javascript on HTTP. The reason is that I use a separate JS blocker which ...
0 votes
1 answer
669 views

security on tails over usb stick

my question concern an attack with following prerequisites: 1) an home router hacked 2) tails installed on usb stick 3) the attacker has got a 0day on linux netfilter stack the attacker get in on ...
0 votes
2 answers
1k views

What makes Onion sites more safe than regular html sites?

What exactly makes an .onion site more secure than a regular html based website, except that it is "hidden" and can't be taken down easily. For a user term, am I more safe when I visit a onion site ...
0 votes
1 answer
768 views

Send emails to external addresses

I would want to send emails to external addresses from an external web site (for example [email protected] or .org etc) from my mail2tor account, but I received the next e-mail: Subject:   ...
1 vote
1 answer
287 views

Does Tor Work With Secret Agent

Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
3 votes
1 answer
8k views

Is there a recommended and/or compatible antivirus software and/or tool available for Tor Browser Bundle

Specifically, for window OS, is there a recommended and/or compatible antivirus software and/or tool one can use to increase the security of the system. The point being, if there is a malware on the ...
0 votes
1 answer
759 views

tor log shows ignoring ExcludeNodes?

Tor Log says: [WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes. and [NOTICE] Opened Socks listener on 127.0.0.1:9150 It minds that my tor, conexion/router have been hacked? To put you ...
0 votes
1 answer
83 views

Prevention of SYN flooding

I am curious how Tor can prevent SYN flooding attacks? From my understanding for a TCP handshake first a SYN has to be sent to the receiver. So why is it not possible to spam various SYN requests over ...
0 votes
3 answers
303 views

Is there a way a website can identify me when connected to it via Orbot?

When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service ...
0 votes
2 answers
641 views

I want to hear opinions about the chain: VPN1==>TOR==>VPN2==>TOR (using Kodachi Linux with USB + Kodachi Linux with Virtualbox)

I would like to hear your opinion about this connection chain, what can you say anonymously and whether it is secure. Boot Linux Kodachi in Live mode from USB Turn on a reliable VPN1 After that I ...
0 votes
1 answer
144 views

What is more safe - keep network connected or do connect-disconnect

If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected? First option looks better because physically disconnected, but multiple connect-disconnect can cause ...
0 votes
1 answer
115 views

AntiVirus Software - Potential security risk?

I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor. I recently read about a free Anti-Virus software sold its Users browsing data. ...
0 votes
2 answers
228 views

What precautions should I take if I want to use Tor to hide my traffic from my University?

I am student at university and use university internet. I am interested in using Tor to prevent my university from seeing what sites I visit and what I am doing on those sites. As I understand it now, ...

1
2 3 4 5
10