Questions tagged [security]
Information about network security
45
questions
16
votes
2
answers
1k
views
Is Tor's security compromised if other services are connecting in the clear?
I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
- 962
2
votes
1
answer
1k
views
Is it safe to use Tor with Malwarebytes Anti-Exploit?
I have Malwarebytes Anti-Exploit on my system. Is it safe to use it with Tor?
- 45
6
votes
3
answers
4k
views
Tor -> VPN or VPN -> Tor
I'm trying to decide which method is safer, Tor -> VPN or VPN -> Tor.
Lets suppose both exit nodes are compromised(Tor and VPN). They were set up by the government and it's goal is to spy on users.
...
- 63
25
votes
5
answers
14k
views
Securely hosting a Tor hidden service/site
There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
- 749
10
votes
1
answer
7k
views
HTML5 Canvas Security Flaw
What security flaw with the HTML5 canvas is Tor Browser Bundle protecting you from when it pops up a notification about the canvas.
- 203
6
votes
3
answers
989
views
Tor does not connect----The probable cause: The security system CYBEROAM
My college has installed a security system called Cyberoam. Now they have blocked many things including youtube, break, etc., as a counter measure, I tried to find a way to circumvent this security ...
5
votes
2
answers
2k
views
Is it posible to choose what entry node you want to use?
If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
- 385
4
votes
1
answer
688
views
Can creating bookmark in TBB add any security risk for user?
Can Creating bookmark in TBB add any security risk for user? Can anybody read any of these bookmarks remotely?
- 3,228
2
votes
2
answers
292
views
Can I track other users on Tor?
I'm an admin on a Windows 8.1 computer and I want to know if I can see what another user is doing on Tor. Would I just use Microsoft Family Safety? I know that the government can spy on Tor, but can I ...
- 123
1
vote
1
answer
747
views
How can I bridge Wlan to Ethernet through tor?
Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network?
By the way I want to use Linux for doing that. So please don't send me Windows ...
- 11
0
votes
1
answer
5k
views
Accessing deep web with virtual machine on Windows
I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?
- 1
20
votes
8
answers
35k
views
Can Tor be used with applications other than Web browsers?
From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc?
(Please explain ...
- 375
13
votes
3
answers
2k
views
Are there any vulnerabilities in the process of onion routing?
In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
- 1,053
10
votes
1
answer
402
views
How would a registration of the .onion gtld impact the Tor network?
The title pretty much says it all.
What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
- 231
9
votes
4
answers
373
views
May I do security inspection on exit relays?
If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
8
votes
1
answer
9k
views
What encryption algorithms does Tor use?
I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
- 215
8
votes
1
answer
3k
views
What is the difference between NTor and TAP?
Recently I read that Tor switched from TAP handshake requests to NTor handshake requests. This seems to improve the performance and doesn't put such a high load on relays (because of Mevade). However ...
- 8,561
7
votes
2
answers
2k
views
How can I download Tor within China to get over the Great Firewall?
I am trying to download Tor within China to use as VPN. However, I cannot access the Tor download page using the mainstream internet inside of China. I am blocked by the Great Firewall, and recent ...
6
votes
2
answers
1k
views
When I use Tor, occasionally I get two different IP address simultaneously
When I use Tor circuit during last few months I use ip-check.info site to verify my IP address in addition to check.torproject.org site. What I have noticed is that occasionally I get two IP addresses ...
- 3,228
6
votes
1
answer
246
views
How do I report a security issue to the Tor project?
I have found a security issue in Tor which allows for information leakage in certain scenarios. I went to report this to the Tor project, but found nothing more than a bug tracker, and no obvious ...
- 63
5
votes
3
answers
10k
views
If I log into facebook with Tor, am I still protected?
I want to be able to log into social networking sites like FB. Do I have to make a new account or will Tor protect my identity still? I think I logged into FB and realized that I might not be ...
- 61
5
votes
5
answers
23k
views
Is using Tor on Windows dangerous?
One of my friends keeps telling me that it's useless to use Tor on Windows, as Windows is full of key-loggers, Trojans and other malware, and if they want to identify me it will be easy because of ...
- 175
5
votes
2
answers
2k
views
How to create a private exit node?
I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
- 51
5
votes
2
answers
5k
views
Use Tor browser as non-root Linux
If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user?
Basically have the browser run ...
- 183
4
votes
1
answer
564
views
I want to setup my own Tor implemintation, what should I take for?
I have download latest source.
Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only?
How much nodes should I setup around the world for small group of confederates?
4
votes
1
answer
1k
views
socks server with "dynamic traffic routing" trought Tor / I2P depending on the extension .i2p .onion
To browse the web, I connect to ssh and make a tunnel to an http proxy (privoxy) who is configured to "route" the traffic depending on the extension, here is an extract of the privoxy config file :
...
- 141
3
votes
1
answer
8k
views
Is there a recommended and/or compatible antivirus software and/or tool available for Tor Browser Bundle
Specifically, for window OS, is there a recommended and/or compatible antivirus software and/or tool one can use to increase the security of the system. The point being, if there is a malware on the ...
- 3,228
3
votes
4
answers
2k
views
Does using Email to send bridges and pluggable transport bridges hinder anonymity?
Bridges can be advertised by Email to clients. This procedure hinders anonymity as in new revelations by Das Erste. May this procedure be halted until more anonymous ways are found and/or the ...
- 3,228
3
votes
2
answers
669
views
Security of Tor bridges and Captcha
Tor's current CAPTCHA implementation is easily crackable through bots - whether through paid human labour or automatic algorithms with 99.8% accuracy[1]. Although the algorithm by Google is for ...
- 131
3
votes
2
answers
17k
views
Security implications of running tails in Virtual machine
So I was suggested to use Tails on a VirtualBox software. But as I was going thru the documentation, I saw this security limitation
"Both the host operating system and the virtualization software are ...
- 151
3
votes
3
answers
2k
views
Too much Not anonim Exit Nodes on the TOR Network!
Many exit nodes are not anonym. It says "Hi I'm a Proxy Or Hi I'm a Tor Exit Node on host name". Here is a test site: http://ipcim.com/hu/.
Host names:
TOR-EXIT.CYLAB.CMU.EDU
sipb-tor.mit.edu
...
- 53
3
votes
2
answers
2k
views
What are advantages and disadvantages of Tor with respect to JonDonym?
Objectively, what are the advantages and disadvantages of Tor with respect to JonDonym (formerly known as JAP) in the sense of security and anonymity?
- 3,228
3
votes
2
answers
1k
views
TBB + FoxyProxy = Safe?
Can I safely use FoxyProxy together with the Tor Browser Bundle?
I like to have an additional hop after the Tor exit node.
Therefore I am considering the use of the FoxyProxy plugin to
the Tor ...
- 31
2
votes
0
answers
172
views
Are there any good practices to keep my Tor relay's private key safe? [closed]
Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe?
We can take for granted that software packages constantly ...
- 2,516
2
votes
4
answers
6k
views
Can HTML5 canvas image data reveal the users IP?
I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
- 21
2
votes
0
answers
181
views
sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network
I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a ...
- 330
2
votes
2
answers
424
views
What would happen if directory authorities were compromised or taken down?
If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?
- 3,228
2
votes
2
answers
562
views
Even after disabling Java Script Fonts are readable. Is there any patch for this issue?
Even after disabling Java Script Fonts are indirectly readable. Is there any patch for this issue?
This is a warning I get from a test site.
Your installed fonts are indirectly readable by this ...
- 3,228
2
votes
1
answer
1k
views
Is using Pinned Tabs and Bookmarks bad for Tor Browser?
There are some onion sites I want to keep track of but the URLs are so long. Is using pinned tabs and bookmarks a secure option? Will people be able to track me if I set bookmarks or pin some tabs?
- 53
2
votes
1
answer
1k
views
Could someone hack a tails device based on the firmware in it?
Could someone hack a tails device based on the firmware in it?
I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
- 123
2
votes
0
answers
112
views
Tor Browser issue with DuckDuckGo [duplicate]
I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option.
I don't know how to remove that to stay on my "...
- 21
2
votes
1
answer
3k
views
Deleting Tor bookmarks
Long story short : I don't like the idea of adding bookmarks with Tor, but I accidentally created one by hitting the shortcut.
For my knowledge and to prevent further mistakes like this one, where ...
- 21
1
vote
1
answer
1k
views
Please review my connection log errors
I am using the current version of Tails. I more often than not get the warning icon at the bottom left of the connection window telling me that the log file has been copied to the clip board. I will ...
- 97
1
vote
2
answers
620
views
TAILS - LIVECD & RATs
If i have a RAT on my computer, obviously, they have control over the computer when I am in win 10 os, for ie. But what about if after the RAT has infected the host os, I use a LIVECD.
QUESTION: When ...
- 11
1
vote
1
answer
152
views
How do bridges defend themselves against targeted scans?
Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required.
Assuming someone runs obfs4 and a ...
- 1,202