Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
16 votes
2 answers
1k views

Is Tor's security compromised if other services are connecting in the clear?

I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
Tom Medley's user avatar
2 votes
1 answer
1k views

Is it safe to use Tor with Malwarebytes Anti-Exploit?

I have Malwarebytes Anti-Exploit on my system. Is it safe to use it with Tor?
Ktitor's user avatar
  • 45
6 votes
3 answers
4k views

Tor -> VPN or VPN -> Tor

I'm trying to decide which method is safer, Tor -> VPN or VPN -> Tor. Lets suppose both exit nodes are compromised(Tor and VPN). They were set up by the government and it's goal is to spy on users. ...
user2789749's user avatar
25 votes
5 answers
14k views

Securely hosting a Tor hidden service/site

There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
Neil Neyman's user avatar
10 votes
1 answer
7k views

HTML5 Canvas Security Flaw

What security flaw with the HTML5 canvas is Tor Browser Bundle protecting you from when it pops up a notification about the canvas.
Mikayla Maki's user avatar
6 votes
3 answers
989 views

Tor does not connect----The probable cause: The security system CYBEROAM

My college has installed a security system called Cyberoam. Now they have blocked many things including youtube, break, etc., as a counter measure, I tried to find a way to circumvent this security ...
daniel cranston's user avatar
5 votes
2 answers
2k views

Is it posible to choose what entry node you want to use?

If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
Garrett Fogerlie's user avatar
4 votes
1 answer
688 views

Can creating bookmark in TBB add any security risk for user?

Can Creating bookmark in TBB add any security risk for user? Can anybody read any of these bookmarks remotely?
Roya's user avatar
  • 3,228
2 votes
2 answers
292 views

Can I track other users on Tor?

I'm an admin on a Windows 8.1 computer and I want to know if I can see what another user is doing on Tor. Would I just use Microsoft Family Safety? I know that the government can spy on Tor, but can I ...
Leo Wilson's user avatar
1 vote
1 answer
747 views

How can I bridge Wlan to Ethernet through tor?

Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network? By the way I want to use Linux for doing that. So please don't send me Windows ...
user13827's user avatar
0 votes
1 answer
5k views

Accessing deep web with virtual machine on Windows

I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?
Enricks's user avatar
20 votes
8 answers
35k views

Can Tor be used with applications other than Web browsers?

From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc? (Please explain ...
McGafter's user avatar
  • 375
13 votes
3 answers
2k views

Are there any vulnerabilities in the process of onion routing?

In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
asheeshr's user avatar
  • 1,053
10 votes
1 answer
402 views

How would a registration of the .onion gtld impact the Tor network?

The title pretty much says it all. What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
Yuka's user avatar
  • 231
9 votes
4 answers
373 views

May I do security inspection on exit relays?

If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
pabouk - Ukraine stay strong's user avatar
8 votes
1 answer
9k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
Nathan Parker's user avatar
8 votes
1 answer
3k views

What is the difference between NTor and TAP?

Recently I read that Tor switched from TAP handshake requests to NTor handshake requests. This seems to improve the performance and doesn't put such a high load on relays (because of Mevade). However ...
Jens Kubieziel's user avatar
  • 8,561
7 votes
2 answers
2k views

How can I download Tor within China to get over the Great Firewall?

I am trying to download Tor within China to use as VPN. However, I cannot access the Tor download page using the mainstream internet inside of China. I am blocked by the Great Firewall, and recent ...
JianguoHisiang's user avatar
6 votes
2 answers
1k views

When I use Tor, occasionally I get two different IP address simultaneously

When I use Tor circuit during last few months I use ip-check.info site to verify my IP address in addition to check.torproject.org site. What I have noticed is that occasionally I get two IP addresses ...
Roya's user avatar
  • 3,228
6 votes
1 answer
246 views

How do I report a security issue to the Tor project?

I have found a security issue in Tor which allows for information leakage in certain scenarios. I went to report this to the Tor project, but found nothing more than a bug tracker, and no obvious ...
cypherpunks's user avatar
5 votes
3 answers
10k views

If I log into facebook with Tor, am I still protected?

I want to be able to log into social networking sites like FB. Do I have to make a new account or will Tor protect my identity still? I think I logged into FB and realized that I might not be ...
user3079044's user avatar
5 votes
5 answers
23k views

Is using Tor on Windows dangerous?

One of my friends keeps telling me that it's useless to use Tor on Windows, as Windows is full of key-loggers, Trojans and other malware, and if they want to identify me it will be easy because of ...
xsari3x's user avatar
  • 175
5 votes
2 answers
2k views

How to create a private exit node?

I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
amos's user avatar
  • 51
5 votes
2 answers
5k views

Use Tor browser as non-root Linux

If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user? Basically have the browser run ...
Dirk Calloway's user avatar
4 votes
1 answer
564 views

I want to setup my own Tor implemintation, what should I take for?

I have download latest source. Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only? How much nodes should I setup around the world for small group of confederates?
polar bear on the white snow's user avatar
4 votes
1 answer
1k views

socks server with "dynamic traffic routing" trought Tor / I2P depending on the extension .i2p .onion

To browse the web, I connect to ssh and make a tunnel to an http proxy (privoxy) who is configured to "route" the traffic depending on the extension, here is an extract of the privoxy config file : ...
kondor's user avatar
  • 141
3 votes
1 answer
8k views

Is there a recommended and/or compatible antivirus software and/or tool available for Tor Browser Bundle

Specifically, for window OS, is there a recommended and/or compatible antivirus software and/or tool one can use to increase the security of the system. The point being, if there is a malware on the ...
Roya's user avatar
  • 3,228
3 votes
4 answers
2k views

Does using Email to send bridges and pluggable transport bridges hinder anonymity?

Bridges can be advertised by Email to clients. This procedure hinders anonymity as in new revelations by Das Erste. May this procedure be halted until more anonymous ways are found and/or the ...
Roya's user avatar
  • 3,228
3 votes
2 answers
669 views

Security of Tor bridges and Captcha

Tor's current CAPTCHA implementation is easily crackable through bots - whether through paid human labour or automatic algorithms with 99.8% accuracy[1]. Although the algorithm by Google is for ...
noɥʇʎԀʎzɐɹƆ's user avatar
3 votes
2 answers
17k views

Security implications of running tails in Virtual machine

So I was suggested to use Tails on a VirtualBox software. But as I was going thru the documentation, I saw this security limitation "Both the host operating system and the virtualization software are ...
Chandra Shekhar's user avatar
3 votes
3 answers
2k views

Too much Not anonim Exit Nodes on the TOR Network!

Many exit nodes are not anonym. It says "Hi I'm a Proxy Or Hi I'm a Tor Exit Node on host name". Here is a test site: http://ipcim.com/hu/. Host names: TOR-EXIT.CYLAB.CMU.EDU sipb-tor.mit.edu ...
mx5 kevin's user avatar
3 votes
2 answers
2k views

What are advantages and disadvantages of Tor with respect to JonDonym?

Objectively, what are the advantages and disadvantages of Tor with respect to JonDonym (formerly known as JAP) in the sense of security and anonymity?
Roya's user avatar
  • 3,228
3 votes
2 answers
1k views

TBB + FoxyProxy = Safe?

Can I safely use FoxyProxy together with the Tor Browser Bundle? I like to have an additional hop after the Tor exit node. Therefore I am considering the use of the FoxyProxy plugin to the Tor ...
Kras's user avatar
  • 31
2 votes
0 answers
172 views

Are there any good practices to keep my Tor relay's private key safe? [closed]

Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe? We can take for granted that software packages constantly ...
alaf's user avatar
  • 2,516
2 votes
4 answers
6k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
Uckel's user avatar
  • 21
2 votes
0 answers
181 views

sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network

I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a ...
Denis's user avatar
  • 330
2 votes
2 answers
424 views

What would happen if directory authorities were compromised or taken down?

If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?
Roya's user avatar
  • 3,228
2 votes
2 answers
562 views

Even after disabling Java Script Fonts are readable. Is there any patch for this issue?

Even after disabling Java Script Fonts are indirectly readable. Is there any patch for this issue? This is a warning I get from a test site. Your installed fonts are indirectly readable by this ...
Roya's user avatar
  • 3,228
2 votes
1 answer
1k views

Is using Pinned Tabs and Bookmarks bad for Tor Browser?

There are some onion sites I want to keep track of but the URLs are so long. Is using pinned tabs and bookmarks a secure option? Will people be able to track me if I set bookmarks or pin some tabs?
get52's user avatar
  • 53
2 votes
1 answer
1k views

Could someone hack a tails device based on the firmware in it?

Could someone hack a tails device based on the firmware in it? I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
Silver's user avatar
  • 123
2 votes
0 answers
112 views

Tor Browser issue with DuckDuckGo [duplicate]

I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option. I don't know how to remove that to stay on my "...
Elis's user avatar
  • 21
2 votes
1 answer
3k views

Deleting Tor bookmarks

Long story short : I don't like the idea of adding bookmarks with Tor, but I accidentally created one by hitting the shortcut. For my knowledge and to prevent further mistakes like this one, where ...
user12512's user avatar
1 vote
1 answer
1k views

Please review my connection log errors

I am using the current version of Tails. I more often than not get the warning icon at the bottom left of the connection window telling me that the log file has been copied to the clip board. I will ...
Toraclease's user avatar
1 vote
2 answers
620 views

TAILS - LIVECD & RATs

If i have a RAT on my computer, obviously, they have control over the computer when I am in win 10 os, for ie. But what about if after the RAT has infected the host os, I use a LIVECD. QUESTION: When ...
johnq4's user avatar
  • 11
1 vote
1 answer
152 views

How do bridges defend themselves against targeted scans?

Running a Tor Bridge recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required. Assuming someone runs obfs4 and a ...
meee's user avatar
  • 1,202