Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
16 votes
2 answers
1k views

Is Tor's security compromised if other services are connecting in the clear?

I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
user avatar
7 votes
3 answers
4k views

Tor -> VPN or VPN -> Tor

I'm trying to decide which method is safer, Tor -> VPN or VPN -> Tor. Lets suppose both exit nodes are compromised(Tor and VPN). They were set up by the government and it's goal is to spy on users. ...
user avatar
2 votes
1 answer
1k views

Is it safe to use Tor with Malwarebytes Anti-Exploit?

I have Malwarebytes Anti-Exploit on my system. Is it safe to use it with Tor?
user avatar
  • 45
27 votes
5 answers
13k views

Securely hosting a Tor hidden service/site

There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
user avatar
10 votes
1 answer
7k views

HTML5 Canvas Security Flaw

What security flaw with the HTML5 canvas is Tor Browser Bundle protecting you from when it pops up a notification about the canvas.
user avatar
6 votes
3 answers
987 views

Tor does not connect----The probable cause: The security system CYBEROAM

My college has installed a security system called Cyberoam. Now they have blocked many things including youtube, break, etc., as a counter measure, I tried to find a way to circumvent this security ...
user avatar
5 votes
2 answers
2k views

Is it posible to choose what entry node you want to use?

If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
user avatar
4 votes
1 answer
672 views

Can creating bookmark in TBB add any security risk for user?

Can Creating bookmark in TBB add any security risk for user? Can anybody read any of these bookmarks remotely?
user avatar
  • 3,236
2 votes
2 answers
283 views

Can I track other users on Tor?

I'm an admin on a Windows 8.1 computer and I want to know if I can see what another user is doing on Tor. Would I just use Microsoft Family Safety? I know that the government can spy on Tor, but can I ...
user avatar
1 vote
1 answer
663 views

How can I bridge Wlan to Ethernet through tor?

Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network? By the way I want to use Linux for doing that. So please don't send me Windows ...
user avatar
0 votes
1 answer
4k views

Accessing deep web with virtual machine on Windows

I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?
user avatar
21 votes
8 answers
33k views

Can Tor be used with applications other than Web browsers?

From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc? (Please explain ...
user avatar
  • 385
9 votes
4 answers
356 views

May I do security inspection on exit relays?

If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
user avatar
8 votes
1 answer
3k views

What is the difference between NTor and TAP?

Recently I read that Tor switched from TAP handshake requests to NTor handshake requests. This seems to improve the performance and doesn't put such a high load on relays (because of Mevade). However ...
user avatar
  • 8,663
4 votes
1 answer
547 views

I want to setup my own Tor implemintation, what should I take for?

I have download latest source. Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only? How much nodes should I setup around the world for small group of confederates?
user avatar
3 votes
2 answers
2k views

What are advantages and disadvantages of Tor with respect to JonDonym?

Objectively, what are the advantages and disadvantages of Tor with respect to JonDonym (formerly known as JAP) in the sense of security and anonymity?
user avatar
  • 3,236
3 votes
1 answer
7k views

Is there a recommended and/or compatible antivirus software and/or tool available for Tor Browser Bundle

Specifically, for window OS, is there a recommended and/or compatible antivirus software and/or tool one can use to increase the security of the system. The point being, if there is a malware on the ...
user avatar
  • 3,236
3 votes
2 answers
16k views

Security implications of running tails in Virtual machine

So I was suggested to use Tails on a VirtualBox software. But as I was going thru the documentation, I saw this security limitation "Both the host operating system and the virtualization software are ...
user avatar
3 votes
4 answers
1k views

Does using Email to send bridges and pluggable transport bridges hinder anonymity?

Bridges can be advertised by Email to clients. This procedure hinders anonymity as in new revelations by Das Erste. May this procedure be halted until more anonymous ways are found and/or the ...
user avatar
  • 3,236
3 votes
2 answers
1k views

TBB + FoxyProxy = Safe?

Can I safely use FoxyProxy together with the Tor Browser Bundle? I like to have an additional hop after the Tor exit node. Therefore I am considering the use of the FoxyProxy plugin to the Tor ...
user avatar
  • 31
11 votes
1 answer
386 views

How would a registration of the .onion gtld impact the Tor network?

The title pretty much says it all. What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
user avatar
  • 241
8 votes
1 answer
8k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
user avatar
6 votes
2 answers
896 views

When I use Tor, occasionally I get two different IP address simultaneously

When I use Tor circuit during last few months I use ip-check.info site to verify my IP address in addition to check.torproject.org site. What I have noticed is that occasionally I get two IP addresses ...
user avatar
  • 3,236
6 votes
1 answer
234 views

How do I report a security issue to the Tor project?

I have found a security issue in Tor which allows for information leakage in certain scenarios. I went to report this to the Tor project, but found nothing more than a bug tracker, and no obvious ...
user avatar
5 votes
1 answer
1k views

socks server with "dynamic traffic routing" trought Tor / I2P depending on the extension .i2p .onion

To browse the web, I connect to ssh and make a tunnel to an http proxy (privoxy) who is configured to "route" the traffic depending on the extension, here is an extract of the privoxy config file : ...
user avatar
  • 151
5 votes
4 answers
22k views

Is using Tor on Windows dangerous?

One of my friends keeps telling me that it's useless to use Tor on Windows, as Windows is full of key-loggers, Trojans and other malware, and if they want to identify me it will be easy because of ...
user avatar
  • 175
5 votes
3 answers
9k views

If I log into facebook with Tor, am I still protected?

I want to be able to log into social networking sites like FB. Do I have to make a new account or will Tor protect my identity still? I think I logged into FB and realized that I might not be ...
user avatar
5 votes
2 answers
2k views

How to create a private exit node?

I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
user avatar
  • 51
5 votes
2 answers
5k views

Use Tor browser as non-root Linux

If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user? Basically have the browser run ...
user avatar
3 votes
3 answers
2k views

Too much Not anonim Exit Nodes on the TOR Network!

Many exit nodes are not anonym. It says "Hi I'm a Proxy Or Hi I'm a Tor Exit Node on host name". Here is a test site: http://ipcim.com/hu/. Host names: TOR-EXIT.CYLAB.CMU.EDU sipb-tor.mit.edu ...
user avatar
2 votes
2 answers
539 views

Even after disabling Java Script Fonts are readable. Is there any patch for this issue?

Even after disabling Java Script Fonts are indirectly readable. Is there any patch for this issue? This is a warning I get from a test site. Your installed fonts are indirectly readable by this ...
user avatar
  • 3,236
2 votes
1 answer
3k views

Deleting Tor bookmarks

Long story short : I don't like the idea of adding bookmarks with Tor, but I accidentally created one by hitting the shortcut. For my knowledge and to prevent further mistakes like this one, where ...
user avatar
2 votes
1 answer
1k views

Could someone hack a tails device based on the firmware in it?

Could someone hack a tails device based on the firmware in it? I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
user avatar
  • 133
1 vote
2 answers
365 views

What would happen if directory authorities were compromised or taken down?

If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?
user avatar
  • 3,236
7 votes
2 answers
2k views

How can I download Tor within China to get over the Great Firewall?

I am trying to download Tor within China to use as VPN. However, I cannot access the Tor download page using the mainstream internet inside of China. I am blocked by the Great Firewall, and recent ...
user avatar
3 votes
2 answers
2k views

What is best secure and anonymous OS for hosting Tor or I2P service?

What is best secure and anonymous OS for hosting Tor or I2P service ? ُEditing: i want server OS full support php and mysql I am confused in choosing ٍServer OS (Debian - Ubuntu - Centos - Redhat) ...
user avatar
3 votes
2 answers
562 views

Security of Tor bridges and Captcha

Tor's current CAPTCHA implementation is easily crackable through bots - whether through paid human labour or automatic algorithms with 99.8% accuracy[1]. Although the algorithm by Google is for ...
user avatar
2 votes
4 answers
6k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
user avatar
  • 21
2 votes
1 answer
1k views

Is using Pinned Tabs and Bookmarks bad for Tor Browser?

There are some onion sites I want to keep track of but the URLs are so long. Is using pinned tabs and bookmarks a secure option? Will people be able to track me if I set bookmarks or pin some tabs?
user avatar
  • 53
2 votes
0 answers
163 views

Are there any good practices to keep my Tor relay's private key safe? [closed]

Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe? We can take for granted that software packages constantly ...
user avatar
  • 2,614
2 votes
0 answers
98 views

Tor Browser issue with DuckDuckGo [duplicate]

I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option. I don't know how to remove that to stay on my "...
user avatar
  • 21
2 votes
0 answers
176 views

sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network

I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a ...
user avatar
  • 320
1 vote
1 answer
131 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...
user avatar
  • 1,182
1 vote
2 answers
595 views

TAILS - LIVECD & RATs

If i have a RAT on my computer, obviously, they have control over the computer when I am in win 10 os, for ie. But what about if after the RAT has infected the host os, I use a LIVECD. QUESTION: When ...
user avatar
  • 11
1 vote
1 answer
909 views

Please review my connection log errors

I am using the current version of Tails. I more often than not get the warning icon at the bottom left of the connection window telling me that the log file has been copied to the clip board. I will ...
user avatar