Questions tagged [security]

Information about network security

76 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
1answer
434 views

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I use Whonix. I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...
2
votes
1answer
276 views

Tor Browser Security

Immediately after downloading the Tor browser I went to the options page and saw that the 'Block dangerous and deceptive content' box under 'Deceptive Content and Dangerous Software Protection' was ...
2
votes
0answers
224 views

Building an Apparmor Profile

I generated an apparmor profile for the tor binary that comes bundled in Ricochet: # Last Modified: Sun Apr 2 2017 #include <tunables/global> /ricochet/*-ricochet/tor { #include <...
2
votes
0answers
119 views

What purpose does congestion control achieve, and how does it work?

I am trying to understand exactly how the different solutions for the congestion control mechanism work and what purpose they achieve. With "the solutions" I mean the circuit level throttling and the ...
2
votes
0answers
172 views

sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network

I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a ...
1
vote
0answers
46 views

Firefox Multi-Account Containers on Tor

Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
1
vote
0answers
21 views

Can a router fake the communication to the next nodes on the path?

I have a theoretical question for understanding the safety of TOR: When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
1
vote
0answers
34 views

using autentication with torsocks --address

On Linux, I noticed I can run torsocks by specifying --address so that it connects to another computer and use that computer's tor connection, e.g downloading a file over tor: torsocks --address my....
1
vote
0answers
56 views

File Quarantined by Anti-Virus Software from the Latest Upgrade of Tor Browser

I upgraded to the lastest version of Tor browser 9.0, and my antivirus software 360 Safeguard reported the file nssdbm3.dll being infected by trojan win32/Trojan.7be Could anybody tell me if this is ...
1
vote
1answer
101 views

Multiple outgoing connections from Tor browser

I see a lot of unknown outgoing connections from tor.exe to different IP addresses (about 6-7) every time Tor browser first connects to Internet after its installing. Only Tor entry guard remains with ...
1
vote
0answers
66 views

Despite your own stupidity, how can Tor Browser fail?

Assuming there are no mistakes done on your own side, (how) can Tor Browser still fail? Is it really possible you get connected to three relays that are in the hands of someone bad? Are there any ...
1
vote
0answers
51 views

can one tab “look” at it's nighbor tab and 'read' its data?

I am on Linux. I use Tor mainly to browse on high(er) risk sites, like torrents and such. Would it be safe to run my gmail account on one tab (of Tor) and on the other tab, to get into a "risky ...
1
vote
1answer
165 views

Does deanonymization only affect the current session?

Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a ...
1
vote
2answers
149 views

Tor and Folder Lock

I'm writing a novel, and one of my characters is into some illegal activities on the web. He's ultra-paranoid about security, so uses Tor...but he doesn't want anyone who might snoop in his computer ...
1
vote
0answers
110 views

RSA keys explanations

I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
1
vote
0answers
143 views

is it safe to rename firefox.exe?

OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right ...
1
vote
1answer
872 views

Hosting Site as Hidden Service

Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service? I do not expect there to be many users (...
1
vote
1answer
254 views

Does Tor Work With Secret Agent

Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
1
vote
0answers
136 views

Hacking Tor in my spy/thriller novel

Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router? Reason: I’m an aspiring writer, working on a spy-...
1
vote
0answers
277 views

Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?

I have followed steps in this article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites ...
1
vote
1answer
5k views

Tails/Tor Browser not connecting to the internet

I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion ...
1
vote
0answers
88 views

How can I set the firewall rules on Iptables without them getting deleted?

I am sending command line commands to the Iptables. Once I set these rules I connect to my router. on connecting all the rules I just add is removed and only the original firewall rules that tails has ...
1
vote
1answer
588 views

How to close tails firewall port?

I need to closing two or more open firewall ports in tails. How can I send the command to do this?
1
vote
0answers
395 views

XSS errors with recent update

I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :(( One site I used to visit often was mail.com, where I ...
1
vote
0answers
12k views

Why is video/mp4 and video/webm blocked by noscript in TBB?

Is it safe to disable the default blocking? Why was it added/turned on? Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling ...
1
vote
0answers
421 views

Am using Tor now w/a VPN. How did MSN pinpoint my location? Screenshot

What is going on? Am using Tor Browser along with "Strong VPN." Just signed out of my Hotmail which, at first, showed U.K. stories on its homepage. But now that I'm about to sign back in, my real ...
1
vote
0answers
3k views

Is it safe to run Avast with Tor

Is it safe to run Avast with Tor? I currently use Avast, but I've understood that Avast, as other anti-virus programs, send and log a lot of data about any browser that is being used. Are there some ...
1
vote
0answers
249 views

Hidden service private key chain

Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the ...
1
vote
0answers
3k views

Reason behind “clearnet warning” when posting URL links on onion websites

When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit Clearnet Warning along with the URL. What is ...
1
vote
0answers
47 views

Tor time-size attack

What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...
1
vote
0answers
24 views

Do secure channels provide a good means for asking bridges in order to stay annonymous

After going through this post Do utilization of bridges and/or Pluggable Transports bridges hinder anonymity? I ask is there any secure communication channel through which we can receive bridges as ...
1
vote
0answers
42 views

Security leak in TBB 3.6.2! Leaking information about installed fonts

No matter what I do, what add-on I installed up to now. On chrome://stopfingerprinting/content/common/options.html my TBB 3.6.2 reveals exactly what fonts I've installed, making me obviously ...
1
vote
0answers
91 views

OpenSSL ROP hack/backdoor(OBVIOUS)/bug

Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL member/programer Andy Polyakov- still a problem in Tor code?
0
votes
0answers
7 views

Does webrtc and other leaks can be done when scripts is allowed?

Unfortunately, I don't understand correctly how this all things work, but can my IP be leaked when I, for example, clicking to ''allow'' noscript to play http://videoabcd1234.mp4 Can it be run via ...
0
votes
1answer
56 views

What if one entity controls all three Tor nodes?

If anybody is able to make themselves a Tor server, what is to stop a security agency from populating the list of Tor servers with many of their own? If they have enough servers there, then might they ...
0
votes
1answer
33 views

Is there a less privacy-invasive way to automate checking whether Tor is being used on the machine than this?

I currently make a HTTPS request to: https://check.torproject.org/ I then check if the output contains this anywhere: Congratulations. This browser is configured to use Tor. If it does, I return &...
0
votes
1answer
43 views

Tor Browser Bundle failing userAgent spoofing

Using Tor Browser Bundle, I noticed the latest versions I have (9x) did not show user agent in the general.userAgent.override entry in about:config. The browser was downloaded from the Tor Project and ...
0
votes
0answers
36 views

Resources for Learning Tor Prerequisite Knowledge

While the basic concept of Tor as an anonymity tool is intuitive, most of the literature describing Tor at a lower level is pretty heavily intertwined with computer networking and security concepts. ...
0
votes
1answer
63 views

Why in Tor browser Duckduckgo (dot) com browser has changed to html (dot) duckduckgo (dot) com?

Question in tittle. Is it okay or some issues happened??
0
votes
0answers
29 views

Security implications for the Tor network if someone run a large IoT network as hidden services

Hypothetically, this is just my curiosity: What would be the security implication if some company decides that Tor hidden service is a good way to solve the NAT issue in IoT (that most IoT devices are ...
0
votes
1answer
85 views

is it safe to download Tor browser from other browser

1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the ...
0
votes
0answers
32 views

Changing Security Level per site?

I've had quite a few instances browsing .onions that require Javascript to be enabled (protonmail, for example). I don't believe there is a way to configure this directly in Tor browser settings, so ...
0
votes
0answers
38 views

fix localhost:8080 not connecting but 127.0.0.1 connects

I am currently trying to host my own forum on darkweb with mybb. I have followed LAMP server setup on digital ocean and then it's guide to install mybb. I have changed all the your domain to my onion ...
0
votes
0answers
59 views

TOR Security breaking NoScript

Since the last update, when set security is set to "Safest", NoScript in the TOR browser does not show all scripts in the drop down preventing them from being temp allowed. When security is set to "...
0
votes
1answer
51 views

How secure is it to use Tor on an outdated OSX

Hi :) I'm unable to update my OSX and it needs to be updated. Does the fact that my OSX is outdated make TOR less secure to use?
0
votes
0answers
28 views

What is the difference between the fingerprint and v3ident in auth_dirs.c

auth_dirs contains a list of trusted directory authorities and consists of entrys such: "moria1 orport=9101 " "v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 " "128.31.0.39:9131 9695 DFC3 5FFE ...
0
votes
1answer
179 views

What makes Onion sites more safe than regular html sites?

What exactly makes an .onion site more secure than a regular html based website, except that it is "hidden" and can't be taken down easily. For a user term, am I more safe when I visit a onion site ...
0
votes
0answers
20 views

Unable to connect Tor browser inside AD client

I'm trying to connect Tor inside the corporate IT network. The workstations are connected through the proxy server and firewall. When the connection failed with 'Connection timeout' error, I tried to ...
0
votes
1answer
76 views

AntiVirus Software - Potential security risk?

I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor. I recently read about a free Anti-Virus software sold its Users browsing data. ...
0
votes
1answer
80 views

What is more safe - keep network connected or do connect-disconnect

If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected? First option looks better because physically disconnected, but multiple connect-disconnect can cause ...