Questions tagged [security]

Information about network security

88 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
107 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
Culture's user avatar
  • 41
2 votes
0 answers
138 views

using autentication with torsocks --address

On Linux, I noticed I can run torsocks by specifying --address so that it connects to another computer and use that computer's tor connection, e.g downloading a file over tor: torsocks --address my....
adrianTNT's user avatar
  • 121
2 votes
0 answers
268 views

is it safe to rename firefox.exe?

OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right ...
Macak's user avatar
  • 21
2 votes
0 answers
379 views

Building an Apparmor Profile

I generated an apparmor profile for the tor binary that comes bundled in Ricochet: # Last Modified: Sun Apr 2 2017 #include <tunables/global> /ricochet/*-ricochet/tor { #include <...
user16950's user avatar
2 votes
0 answers
123 views

What purpose does congestion control achieve, and how does it work?

I am trying to understand exactly how the different solutions for the congestion control mechanism work and what purpose they achieve. With "the solutions" I mean the circuit level throttling and the ...
MahNas92's user avatar
  • 121
2 votes
0 answers
179 views

sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network

I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a ...
Denis's user avatar
  • 330
1 vote
2 answers
222 views

Being identified as running Tor exit relay. Constant capchas, security checks

I recently realized that while using TOR (TOR bundle) that a site that wouldn't block out anyone because they use Tor, has Cloudflare service stating that they need to check the security of my browser ...
Jason's user avatar
  • 11
1 vote
0 answers
126 views

Does "safer" security setting on Tor disable javascript on HTTP .onion sites?

In TOR manual we have the following: Safer (...) JavaScript is disabled on all non-HTTPS sites; some fonts and math symbols are disabled; audio and video (HTML5 media) are click-to-play. I was ...
greg_pio's user avatar
1 vote
0 answers
94 views

Isn't deanonymization by having the entry and exit nodes in the same country a threat?

Consider the following scenario. I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes. I am trying to call for demonstrations and criticize policies on ...
groscean's user avatar
1 vote
0 answers
164 views

How do onion services host anonymous chatrooms and what level of anonymity is present when using one?

There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
Swangie's user avatar
  • 974
1 vote
0 answers
180 views

Can you have a setup with both VPN over Tor and Tor over VPN

Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect to a VPN once you are browsing in Tor to encrypt both ...
Swangie's user avatar
  • 974
1 vote
0 answers
413 views

How to be more anonymous and safe on Tor

Is it possible to more anonymous and on Tor than this setup and browsing method: Using Tails OS from USB which stores no data on hard drive Using Tor browser on safest mode Always automatically ...
Swangie's user avatar
  • 974
1 vote
2 answers
407 views

Firefox Multi-Account Containers on Tor

Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
AnonTorSMC's user avatar
1 vote
0 answers
24 views

Can a router fake the communication to the next nodes on the path?

I have a theoretical question for understanding the safety of TOR: When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
jenald's user avatar
  • 11
1 vote
0 answers
110 views

What is the difference between the fingerprint and v3ident in auth_dirs.c

auth_dirs contains a list of trusted directory authorities and consists of entrys such: "moria1 orport=9101 " "v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 " "128.31.0.39:9131 9695 DFC3 5FFE ...
RoombaZoomba's user avatar
1 vote
0 answers
81 views

File Quarantined by Anti-Virus Software from the Latest Upgrade of Tor Browser

I upgraded to the lastest version of Tor browser 9.0, and my antivirus software 360 Safeguard reported the file nssdbm3.dll being infected by trojan win32/Trojan.7be Could anybody tell me if this is ...
Libertarian Feudalist Bot's user avatar
1 vote
1 answer
178 views

Multiple outgoing connections from Tor browser

I see a lot of unknown outgoing connections from tor.exe to different IP addresses (about 6-7) every time Tor browser first connects to Internet after its installing. Only Tor entry guard remains with ...
Katty575's user avatar
1 vote
0 answers
2k views

How do I load Tor-Browser with Wayland?

Firefox functions in Fedora/CentOS with Wayland, Tor-Browser should too. No Xorg necessary. How do I launch Tor-Browser under Wayland? Thank you!
Tyler's user avatar
  • 111
1 vote
0 answers
72 views

Despite your own stupidity, how can Tor Browser fail?

Assuming there are no mistakes done on your own side, (how) can Tor Browser still fail? Is it really possible you get connected to three relays that are in the hands of someone bad? Are there any ...
RTW3324's user avatar
  • 11
1 vote
0 answers
53 views

can one tab "look" at it's nighbor tab and 'read' its data?

I am on Linux. I use Tor mainly to browse on high(er) risk sites, like torrents and such. Would it be safe to run my gmail account on one tab (of Tor) and on the other tab, to get into a "risky ...
James's user avatar
  • 11
1 vote
1 answer
211 views

Does deanonymization only affect the current session?

Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a ...
SilverWolf's user avatar
1 vote
1 answer
288 views

Tor and Folder Lock

I'm writing a novel, and one of my characters is into some illegal activities on the web. He's ultra-paranoid about security, so uses Tor...but he doesn't want anyone who might snoop in his computer ...
JM48's user avatar
  • 11
1 vote
0 answers
148 views

RSA keys explanations

I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
Antoine Duquenoy's user avatar
1 vote
2 answers
1k views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
pnujhpdo's user avatar
1 vote
1 answer
287 views

Does Tor Work With Secret Agent

Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
Searcher's user avatar
1 vote
0 answers
139 views

Hacking Tor in my spy/thriller novel

Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router? Reason: I’m an aspiring writer, working on a spy-...
MikeCCarol's user avatar
1 vote
0 answers
298 views

Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?

I have followed steps in this article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites ...
aaaaka's user avatar
  • 11
1 vote
1 answer
9k views

Tails/Tor Browser not connecting to the internet

I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
sue's user avatar
  • 11
1 vote
0 answers
101 views

How can I set the firewall rules on Iptables without them getting deleted?

I am sending command line commands to the Iptables. Once I set these rules I connect to my router. on connecting all the rules I just add is removed and only the original firewall rules that tails has ...
bob's user avatar
  • 51
1 vote
1 answer
832 views

How to close tails firewall port?

I need to closing two or more open firewall ports in tails. How can I send the command to do this?
Nick's user avatar
  • 11
1 vote
0 answers
455 views

XSS errors with recent update

I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :(( One site I used to visit often was mail.com, where I ...
H Mai's user avatar
  • 11
1 vote
0 answers
18k views

Why is video/mp4 and video/webm blocked by noscript in TBB?

Is it safe to disable the default blocking? Why was it added/turned on? Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling ...
Alek Musonda's user avatar
1 vote
0 answers
462 views

Am using Tor now w/a VPN. How did MSN pinpoint my location? Screenshot

What is going on? Am using Tor Browser along with "Strong VPN." Just signed out of my Hotmail which, at first, showed U.K. stories on its homepage. But now that I'm about to sign back in, my real ...
B. Y.'s user avatar
  • 21
1 vote
0 answers
3k views

Is it safe to run Avast with Tor

Is it safe to run Avast with Tor? I currently use Avast, but I've understood that Avast, as other anti-virus programs, send and log a lot of data about any browser that is being used. Are there some ...
Avaster's user avatar
  • 11
1 vote
0 answers
356 views

Hidden service private key chain

Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
Mario Cecil's user avatar
1 vote
0 answers
4k views

Reason behind "clearnet warning" when posting URL links on onion websites

When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit Clearnet Warning along with the URL. What is ...
simulacrum's user avatar
1 vote
0 answers
58 views

Tor time-size attack

What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...
ARandomGuest's user avatar
1 vote
0 answers
27 views

Do secure channels provide a good means for asking bridges in order to stay annonymous

After going through this post Do utilization of bridges and/or Pluggable Transports bridges hinder anonymity? I ask is there any secure communication channel through which we can receive bridges as ...
user285oo6's user avatar
1 vote
0 answers
44 views

Security leak in TBB 3.6.2! Leaking information about installed fonts

No matter what I do, what add-on I installed up to now. On chrome://stopfingerprinting/content/common/options.html my TBB 3.6.2 reveals exactly what fonts I've installed, making me obviously ...
Michael's user avatar
  • 21
1 vote
0 answers
102 views

OpenSSL ROP hack/backdoor(OBVIOUS)/bug

Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL member/programer Andy Polyakov- still a problem in Tor code?
lyn roj's user avatar
  • 11
0 votes
1 answer
56 views

And if DDoS attacks could enhance the anonymity of the Tor network?

The most effective approach for an attacker would be to establish Tor routing and send packets to trigger a chain reaction across 3 or more relays. Now, couldn’t these attacks potentially be an ...
setnit6's user avatar
0 votes
1 answer
50 views

Implications of using applications on Tor

There is an advice instructing to use compiled apps instead of webapps, since the former can be checked against checksums, unlike the latter which is susceptible to Javascript code injection. E.g: use ...
AvidSeeker's user avatar
0 votes
1 answer
90 views

Can a Hidden Service track you the same way an exit node can?

imagine if the onion service decided to be the malicious exit node itself. It’s not (Exit node) but could it travel back through its relays (possibly even skip) to the rendezvous point that track you ...
LimelightFaygo's user avatar
0 votes
1 answer
139 views

How can I disable Tor's automatic IP circuit renewal process?

I have an issue with this process when trying to log in or authenticate to a site where I only want to use the VPN and don't want the IP to change automatically at that time, as it interferes with the ...
Santi El Curioso's user avatar
0 votes
1 answer
169 views

How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only

How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only (via PAC file) in a "normal" browser? I am aware that there is risk that .onion sites can still fingerprint me and/or ...
Lera Rosalene's user avatar
0 votes
1 answer
173 views

Tor Downloads/ Anonymity

I had a question regarding Downloading files Using the Tor software . Lets say you are a journalist and you were on some website on TOR (like a .onion) and you needed to download standard MP4/ PNG/ ...
Asked if Questions's user avatar
0 votes
0 answers
19 views

writes that I don't use tor, I can't

it gives an error already on the home page, I can't log in to any site, and in principle, searching for any information ends with an error and throwing out of the application
Anastasia's user avatar
0 votes
0 answers
70 views

Hidden service setup

Planning on starting my own hidden service but would want some advice regarding the security/privacy. Looking for someone with experience to be able to tell me from A to Z (from nothing to finished ...
random8493's user avatar
0 votes
1 answer
58 views

Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?

Goal: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are ...
Nick Carducci for Carface Bank's user avatar
0 votes
1 answer
141 views

JavaScript exception when using "Safest" security profile in Tor

I'm using the "Safest" security profile in Tor (accessible via about:preferences). Here's one point in the description for that profile: JavaScript is disabled by default on all sites. (...
GPWR's user avatar
  • 115