Questions tagged [security]
Information about network security
80
questions with no upvoted or accepted answers
4
votes
0
answers
83
views
Tor hiden service ratelimits
While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
- 41
2
votes
0
answers
222
views
is it safe to rename firefox.exe?
OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right ...
- 21
2
votes
0
answers
324
views
Building an Apparmor Profile
I generated an apparmor profile for the tor binary that comes bundled in Ricochet:
# Last Modified: Sun Apr 2 2017
#include <tunables/global>
/ricochet/*-ricochet/tor {
#include <...
- 21
2
votes
0
answers
122
views
What purpose does congestion control achieve, and how does it work?
I am trying to understand exactly how the different solutions for the congestion control mechanism work and what purpose they achieve.
With "the solutions" I mean the circuit level throttling and the ...
- 121
2
votes
0
answers
176
views
sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network
I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a ...
- 320
1
vote
0
answers
51
views
Isn't deanonymization by having the entry and exit nodes in the same country a threat?
Consider the following scenario.
I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes.
I am trying to call for demonstrations and criticize policies on ...
- 11
1
vote
0
answers
108
views
How do onion services host anonymous chatrooms and what level of anonymity is present when using one?
There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
- 879
1
vote
0
answers
143
views
Can you have a setup with both VPN over Tor and Tor over VPN
Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect to a VPN once you are browsing in Tor to encrypt both ...
- 879
1
vote
0
answers
271
views
How to be more anonymous and safe on Tor
Is it possible to more anonymous and on Tor than this setup and browsing method:
Using Tails OS from USB which stores no data on hard drive
Using Tor browser on safest mode
Always automatically ...
- 879
1
vote
2
answers
265
views
Firefox Multi-Account Containers on Tor
Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
- 11
1
vote
0
answers
24
views
Can a router fake the communication to the next nodes on the path?
I have a theoretical question for understanding the safety of TOR:
When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
- 11
1
vote
0
answers
77
views
What is the difference between the fingerprint and v3ident in auth_dirs.c
auth_dirs contains a list of trusted directory authorities and consists of entrys such:
"moria1 orport=9101 "
"v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 "
"128.31.0.39:9131 9695 DFC3 5FFE ...
- 11
1
vote
0
answers
90
views
using autentication with torsocks --address
On Linux, I noticed I can run torsocks by specifying --address so that it connects to another computer and use that computer's tor connection, e.g downloading a file over tor:
torsocks --address my....
- 111
1
vote
0
answers
65
views
File Quarantined by Anti-Virus Software from the Latest Upgrade of Tor Browser
I upgraded to the lastest version of Tor browser 9.0, and my antivirus software 360 Safeguard reported the file nssdbm3.dll being infected by trojan win32/Trojan.7be
Could anybody tell me if this is ...
1
vote
1
answer
159
views
Multiple outgoing connections from Tor browser
I see a lot of unknown outgoing connections from tor.exe to different IP addresses (about 6-7) every time Tor browser first connects to Internet after its installing. Only Tor entry guard remains with ...
- 11
1
vote
0
answers
1k
views
How do I load Tor-Browser with Wayland?
Firefox functions in Fedora/CentOS with Wayland, Tor-Browser should too. No Xorg necessary. How do I launch Tor-Browser under Wayland? Thank you!
- 111
1
vote
0
answers
69
views
Despite your own stupidity, how can Tor Browser fail?
Assuming there are no mistakes done on your own side, (how) can Tor Browser still fail? Is it really possible you get
connected to three relays that are in the hands of someone bad? Are there any ...
- 11
1
vote
0
answers
52
views
can one tab "look" at it's nighbor tab and 'read' its data?
I am on Linux. I use Tor mainly to browse on high(er) risk sites, like torrents and such. Would it be safe to run my gmail account on one tab (of Tor) and on the other tab, to get into a "risky ...
- 11
1
vote
1
answer
200
views
Does deanonymization only affect the current session?
Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a ...
- 111
1
vote
1
answer
250
views
Tor and Folder Lock
I'm writing a novel, and one of my characters is into some illegal activities on the web. He's ultra-paranoid about security, so uses Tor...but he doesn't want anyone who might snoop in his computer ...
- 11
1
vote
0
answers
127
views
RSA keys explanations
I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
1
vote
2
answers
1k
views
Hosting Site as Hidden Service
Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service?
I do not expect there to be many users (...
- 93
1
vote
1
answer
285
views
Does Tor Work With Secret Agent
Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
- 11
1
vote
0
answers
138
views
Hacking Tor in my spy/thriller novel
Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router?
Reason: I’m an aspiring writer, working on a spy-...
- 37
1
vote
0
answers
280
views
Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?
I have followed steps in this article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites ...
- 11
1
vote
1
answer
8k
views
Tails/Tor Browser not connecting to the internet
I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
- 11
1
vote
0
answers
97
views
How can I set the firewall rules on Iptables without them getting deleted?
I am sending command line commands to the Iptables. Once I set these rules I connect to my router. on connecting all the rules I just add is removed and only the original firewall rules that tails has ...
- 51
1
vote
1
answer
748
views
How to close tails firewall port?
I need to closing two or more open firewall ports in tails. How can I send the command to do this?
- 11
1
vote
0
answers
452
views
XSS errors with recent update
I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :((
One site I used to visit often was mail.com, where I ...
- 11
1
vote
0
answers
16k
views
Why is video/mp4 and video/webm blocked by noscript in TBB?
Is it safe to disable the default blocking? Why was it added/turned on?
Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling ...
- 13
1
vote
0
answers
452
views
Am using Tor now w/a VPN. How did MSN pinpoint my location? Screenshot
What is going on? Am using Tor Browser along with "Strong VPN." Just signed out of my Hotmail which, at first, showed U.K. stories on its homepage.
But now that I'm about to sign back in, my real ...
- 21
1
vote
0
answers
3k
views
Is it safe to run Avast with Tor
Is it safe to run Avast with Tor?
I currently use Avast, but I've understood that Avast, as other anti-virus programs, send and log a lot of data about any browser that is being used. Are there some ...
- 11
1
vote
0
answers
321
views
Hidden service private key chain
Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
- 23
1
vote
0
answers
3k
views
Reason behind "clearnet warning" when posting URL links on onion websites
When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit Clearnet Warning along with the URL.
What is ...
- 176
1
vote
0
answers
51
views
Tor time-size attack
What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...
- 11
1
vote
0
answers
25
views
Do secure channels provide a good means for asking bridges in order to stay annonymous
After going through this post
Do utilization of bridges and/or Pluggable Transports bridges hinder anonymity? I ask is there any secure communication channel through which we can receive bridges as ...
- 233
1
vote
0
answers
44
views
Security leak in TBB 3.6.2! Leaking information about installed fonts
No matter what I do, what add-on I installed up to now.
On chrome://stopfingerprinting/content/common/options.html my TBB 3.6.2 reveals exactly what fonts I've installed, making me obviously ...
- 21
1
vote
0
answers
96
views
OpenSSL ROP hack/backdoor(OBVIOUS)/bug
Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL
member/programer Andy Polyakov- still a problem in Tor code?
- 11
0
votes
1
answer
34
views
Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?
Goal: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are ...
- 101
0
votes
1
answer
49
views
JavaScript exception when using "Safest" security profile in Tor
I'm using the "Safest" security profile in Tor (accessible via about:preferences).
Here's one point in the description for that profile:
JavaScript is disabled by default on all sites. (...
- 1
0
votes
1
answer
88
views
Rebuttal to Sven Taylor's article on Tor?
In October 2019, Sven Taylor published a sobering article titled Is Tor Trustworthy and Safe?. In it he argues that (numbering mine),
US government agencies can de-anonymize Tor users on a “wide ...
- 1
0
votes
2
answers
181
views
What precautions should I take if I want to use Tor to hide my traffic from my University?
I am student at university and use university internet. I am interested in using Tor to prevent my university from seeing what sites I visit and what I am doing on those sites. As I understand it now, ...
0
votes
0
answers
309
views
Security question regareding Tor & Anonsurf
So I have been using Parrot Security lately and I have a couple security questions regarding Tor/Anonsurf. First, when I boot up Parrot and open the Tor Browser and click connect, Tor connects, then ...
0
votes
1
answer
49
views
What are the botnets that can be used on tor?
I am a student and want to study botnets on tor, so I would like to ask what are the botnets that can be used on tor, preferably controlled through C&C. It would be nice to have the source code of ...
- 3
0
votes
0
answers
53
views
Would this be a reasonably secure website?
If this is something for the Information Security Stack Exchange I understand. I want to know if this hypothetical setup is reasonably secure to the point where it can't be conventionally hacked ...
- 37
0
votes
0
answers
86
views
Encrypted DNS without Tor Browser Bundle
If using Tor and NOT Tor Browser Bundle, do you need to encrypt your dns or is setting your DNS on router to Cloudflare DNS sufficient?
wanting to obfuscate all DNS from view of ISP
- 11
0
votes
1
answer
85
views
Is there a safe way to access this site
" https://thewest.com.au/digital-edition?utm_source=SSW&utm_medium=Referral&utm_campaign=digital-edition&utm_term=read-the-digital-edition&utm_content=top-nav "
I am a paid ...
0
votes
1
answer
1k
views
How does JavaScript interfere with Tor browser anonymity?
Heard that JavaScript interferes with Tor when browsing the internet causing a breach in its security wall, having the effect of a hole in the ozone layer. Why is this? How does this breach work ...
- 248
0
votes
0
answers
65
views
Aren't public wi-fi hotspots still insecure for Tails and Tor users?
If connecting to public wi-fi with only Windows and Chrome already makes a user cautious of their activity, how much more of a shield is it to connect to the same public wi-fi with a Tails-Tor system? ...
- 248
0
votes
3
answers
186
views
Is there a way a website can identify me when connected to it via Orbot?
When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service ...
- 111