Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0 votes
1 answer
28 views

Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?

Goal: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are ...
0 votes
2 answers
223 views

Does enabling java let my ISP find out what I am doing?

As the title says: if I enable javascript can my ISP know what I am doing? As in do I become transparent (somehow) to my ISP? I am only interested to know the ISP side, as the tor FAQ (&co) are ...
0 votes
3 answers
400 views

Why doesn't Tor browser block HTTP by default?

Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
1 vote
1 answer
49 views

Tor safe when taking future in to account?

With quantum computing becoming better by the day I have a few questions. How viable and likely is it that an adversary to saves all tor traffic in order to decrypt it at a later date? When ...
5 votes
2 answers
2k views

How to create a private exit node?

I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
0 votes
1 answer
49 views

JavaScript exception when using "Safest" security profile in Tor

I'm using the "Safest" security profile in Tor (accessible via about:preferences). Here's one point in the description for that profile: JavaScript is disabled by default on all sites. (...
0 votes
2 answers
160 views

Can Tor connection be intercepted/tampered by exit nodes?

Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP ...
1 vote
2 answers
1k views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1 vote
0 answers
51 views

Isn't deanonymization by having the entry and exit nodes in the same country a threat?

Consider the following scenario. I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes. I am trying to call for demonstrations and criticize policies on ...
1 vote
2 answers
264 views

Firefox Multi-Account Containers on Tor

Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
0 votes
2 answers
324 views

Does connecting to a normal website using tor work the same way as connecting to a hidden website?

When you connect to a normal website using tor, is the process of connecting to it the same as when you connect to a hidden website? First you connect to the entry node, then middle node then exit ...
0 votes
2 answers
237 views

Is it safe to use Nipe with a Raspberry Pi?

I'm not a Perl coder and hoped Tor users (more familiar with proper tor application and usage) could weigh in on the implementation and overall usage of such a tool. Would anyone recommend against ...
0 votes
2 answers
606 views

is it safe to download Tor browser from other browser

1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the ...
0 votes
1 answer
4k views

Accessing deep web with virtual machine on Windows

I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?
0 votes
1 answer
85 views

Is there a safe way to access this site

" https://thewest.com.au/digital-edition?utm_source=SSW&utm_medium=Referral&utm_campaign=digital-edition&utm_term=read-the-digital-edition&utm_content=top-nav " I am a paid ...
0 votes
1 answer
113 views

How do Linux global brokers

I have a Linux VPS. I need to go outside and I try to proxy export http_proxy="http://127.0.0.1:8123" export https_proxy="https://127.0.0.1:8123" But not all agents. I have an nginx that needs ...
1 vote
1 answer
746 views

How to close tails firewall port?

I need to closing two or more open firewall ports in tails. How can I send the command to do this?
0 votes
1 answer
342 views

TorButton Security settings: Define custom level

Is there a way to define a custom level in the security settings? For example I'd like to use the "safer" preset but allow Javascript on HTTP. The reason is that I use a separate JS blocker which ...
0 votes
1 answer
615 views

security on tails over usb stick

my question concern an attack with following prerequisites: 1) an home router hacked 2) tails installed on usb stick 3) the attacker has got a 0day on linux netfilter stack the attacker get in on ...
1 vote
1 answer
8k views

Tails/Tor Browser not connecting to the internet

I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
0 votes
2 answers
810 views

What makes Onion sites more safe than regular html sites?

What exactly makes an .onion site more secure than a regular html based website, except that it is "hidden" and can't be taken down easily. For a user term, am I more safe when I visit a onion site ...
0 votes
1 answer
695 views

Send emails to external addresses

I would want to send emails to external addresses from an external web site (for example contact@mywebsite.com or .org etc) from my mail2tor account, but I received the next e-mail: Subject:   ...
1 vote
1 answer
285 views

Does Tor Work With Secret Agent

Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
0 votes
2 answers
2k views

How do I use tor network to access my email account

Is there anyway to use tor network to securely access me email accounts like with onion? I use tor browser to access my email account and sent my self an email to another email service and it showed ...
3 votes
1 answer
7k views

Is there a recommended and/or compatible antivirus software and/or tool available for Tor Browser Bundle

Specifically, for window OS, is there a recommended and/or compatible antivirus software and/or tool one can use to increase the security of the system. The point being, if there is a malware on the ...
0 votes
1 answer
378 views

tor log shows ignoring ExcludeNodes?

Tor Log says: [WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes. and [NOTICE] Opened Socks listener on 127.0.0.1:9150 It minds that my tor, conexion/router have been hacked? To put you ...
0 votes
1 answer
49 views

Prevention of SYN flooding

I am curious how Tor can prevent SYN flooding attacks? From my understanding for a TCP handshake first a SYN has to be sent to the receiver. So why is it not possible to spam various SYN requests over ...
0 votes
3 answers
186 views

Is there a way a website can identify me when connected to it via Orbot?

When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service ...
0 votes
2 answers
373 views

I want to hear opinions about the chain: VPN1==>TOR==>VPN2==>TOR (using Kodachi Linux with USB + Kodachi Linux with Virtualbox)

I would like to hear your opinion about this connection chain, what can you say anonymously and whether it is secure. Boot Linux Kodachi in Live mode from USB Turn on a reliable VPN1 After that I ...
0 votes
1 answer
137 views

What is more safe - keep network connected or do connect-disconnect

If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected? First option looks better because physically disconnected, but multiple connect-disconnect can cause ...
0 votes
1 answer
113 views

AntiVirus Software - Potential security risk?

I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor. I recently read about a free Anti-Virus software sold its Users browsing data. ...
0 votes
2 answers
181 views

What precautions should I take if I want to use Tor to hide my traffic from my University?

I am student at university and use university internet. I am interested in using Tor to prevent my university from seeing what sites I visit and what I am doing on those sites. As I understand it now, ...
0 votes
1 answer
49 views

What are the botnets that can be used on tor?

I am a student and want to study botnets on tor, so I would like to ask what are the botnets that can be used on tor, preferably controlled through C&C. It would be nice to have the source code of ...
0 votes
4 answers
470 views

Cash from the dark net?

Are any of these credit card sites and cash sites real? I'd love to know some of them because I've been scrolling through websites and all I see is scam scam
0 votes
2 answers
104 views

How secure is it to use Tor on an outdated OSX

Hi :) I'm unable to update my OSX and it needs to be updated. Does the fact that my OSX is outdated make TOR less secure to use?
0 votes
1 answer
93 views

Does clicking on "new circuit for this site" too often risk deanonymization?

I have a (probably stupid) quirk/OCB: When I want my traffic to a website to be particularly hard to backtrace, I click dozens of times on the new circuit for this site button (sometimes for >15 ...
0 votes
2 answers
673 views

Tor Onions active on Tail , does Electrum use that proxy?

When I open onion relay on Tails , and then open Electrum Wallet on LiveCD Tails Does that Electrum connected with Tor proxy/network? Hope some users would help me to explain this things
0 votes
1 answer
89 views

Is there a less privacy-invasive way to automate checking whether Tor is being used on the machine than this?

I currently make a HTTPS request to: https://check.torproject.org/ I then check if the output contains this anywhere: Congratulations. This browser is configured to use Tor. If it does, I return &...
0 votes
1 answer
1k views

How does JavaScript interfere with Tor browser anonymity?

Heard that JavaScript interferes with Tor when browsing the internet causing a breach in its security wall, having the effect of a hole in the ozone layer. Why is this? How does this breach work ...
0 votes
1 answer
88 views

Rebuttal to Sven Taylor's article on Tor?

In October 2019, Sven Taylor published a sobering article titled Is Tor Trustworthy and Safe?. In it he argues that (numbering mine), US government agencies can de-anonymize Tor users on a “wide ...
0 votes
2 answers
271 views

SSL between onion and web server

I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
1 vote
1 answer
159 views

Multiple outgoing connections from Tor browser

I see a lot of unknown outgoing connections from tor.exe to different IP addresses (about 6-7) every time Tor browser first connects to Internet after its installing. Only Tor entry guard remains with ...
1 vote
1 answer
200 views

Does deanonymization only affect the current session?

Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a ...
0 votes
1 answer
3k views

Password protecting the Tor browser

I'd like to password protect the Tor browser on my computer so that others cannot open it without a password. Is there a simple way of doing so? I am on a Mac using OSX. So far, I'm thinking the best ...
0 votes
1 answer
166 views

Tor app. through Google Play

I downloaded the Tor browser app. through Google play, is the app. safe and anonymous even though it's downloaded through Google?
0 votes
1 answer
551 views

Tor Browser Bundle failing userAgent spoofing

Using Tor Browser Bundle, I noticed the latest versions I have (9x) did not show user agent in the general.userAgent.override entry in about:config. The browser was downloaded from the Tor Project and ...
1 vote
1 answer
250 views

Tor and Folder Lock

I'm writing a novel, and one of my characters is into some illegal activities on the web. He's ultra-paranoid about security, so uses Tor...but he doesn't want anyone who might snoop in his computer ...
0 votes
1 answer
1k views

Prevent traffic correlation/timing attack

When running a hidden service, should the operator run own entry guard? Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
0 votes
1 answer
425 views

It it safe to use Tor in Windows safe-mode with networking?

Is it even safer to use Tor in Windows safe-mode with networking than using Tor in Windows normal mode..
0 votes
1 answer
219 views

How to secure my torrelays against hijacking (debian), bounty $50

I'm running some tor exitrelays with rsyslog off. Does this disable ALL loggin? If no how I disable ALL loggin? Next to that I want to secure those against hijacking as good as possible. So I was ...

1
2 3 4 5
10