Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0
votes
0answers
14 views

Tunneling RDP under obsf4

I want to run tunnel between my local and RDP under obsf4 bridge. Can anyone explain me how can i do this? I use ubuntu, and krdc to connect on rdp. Thanks!
0
votes
0answers
32 views

Encrypted DNS without Tor Browser Bundle

If using Tor and NOT Tor Browser Bundle, do you need to encrypt your dns or is setting your DNS on router to Cloudflare DNS sufficient? wanting to obfuscate all DNS from view of ISP
0
votes
1answer
73 views

How to prevent DNS Spoofing attacks with Tor?

This question is an extension of How does Tor handle DNS poisoning. After having read Introducing DNS Resolver for Tor and DNS security issues, I am a bit concerned about the riscs of using Tor (...
3
votes
2answers
587 views

Does suspending TAILS then removing the USB drive increase security?

Let's suppose my goal is to prevent someone from tampering with my TAILS session while I'm absent from my laptop, and let's suppose that shutting down every time I go for a walk isn't an option. The ...
0
votes
2answers
57 views

Extra security for private forum posts

I'm a complete newby to anything like Tor so please excuse if this is an ignorant question. We're looking for a way to have a private forum that members can't copy and paste, take screenshots of or ...
4
votes
0answers
57 views

Tor hiden service ratelimits

While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client ...
0
votes
1answer
113 views

Why doesn't Tor browser block HTTP by default?

Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser ...
0
votes
2answers
366 views

Never using Tails and Tor from home IP address but still caught

If a system using Tails and Tor always connects to public wifi in a city far away from someone's home IP address, what are all the different ways this would backfire such that authorities still manage ...
1
vote
0answers
75 views

How do onion services host anonymous chatrooms and what level of anonymity is present when using one?

There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when ...
0
votes
0answers
55 views

Aren't public wi-fi hotspots still insecure for Tails and Tor users?

If connecting to public wi-fi with only Windows and Chrome already makes a user cautious of their activity, how much more of a shield is it to connect to the same public wi-fi with a Tails-Tor system? ...
1
vote
0answers
121 views

Can you have a setup with both VPN over Tor and Tor over VPN

Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect to a VPN once you are browsing in Tor to encrypt both ...
1
vote
0answers
205 views

How to be more anonymous and safe on Tor

Is it possible to more anonymous and on Tor than this setup and browsing method: Using Tails OS from USB which stores no data on hard drive Using Tor browser on safest mode Always automatically ...
0
votes
0answers
21 views

Besides MAC address, how else do public wi-fi networks identify connected hardware devices?

The list of connected WLAN clients (users) on my wi-fi only gives the following fields per user: Duration of time connected IP address MAC address Device name The last two fields are always unique ...
0
votes
1answer
77 views

HTTPS Everywhere doesn't work all the time

I tried to access http://uniquemachine.org and tor-browser/HTTPSeverywhere-add-on reached it without warning me. Would you know why ? How to automatically warn me at every single http:// i'm trying to ...
0
votes
0answers
45 views

Sync a machine's firefox bookmarks to a tor browser

Is there a way to periodically pull a linux machine's firefox bookmarks to a linux tor browser ? I mean pull and not sync because I want the URL ending in .onion that I saved in tor browser to stay ...
0
votes
1answer
59 views

Reusing a Tor “dirty” circuit

I have a couple of questions related to Tor circuits. Let's say that there is a circuit that was used and marked "dirty" and has also expired (no active TCP stream). Can this circuit ever ...
0
votes
0answers
12 views

open ports in nodes

Recently have scanned exit nodes a couple of times, and find that where few ports opened there. Should one be worried if there are nodes with open ports in the circuit, or doesn't suit any effect on ...
2
votes
1answer
19 views

Should I first stop all local servers running on localhost before starting Tor?

If I have apache/mysql and the PHP built-in server running on localhost, should I first stop the local server before starting Tor, or is it totally safe? As in, can someone access my computer/sever/...
0
votes
0answers
8 views

Loading slow & times out

Solutions only for developers. Useless for individuals. Please prove to me that if resolved for individuals, some of whom are also developers, none of those developers are or could be scammers. The ...
0
votes
1answer
40 views

Locking down the browser to the max

What extensions and settings must be added to the browser to make it as private and secure as possible? I know that the answer to this probably changes a lot as security changes. But so far what I ...
0
votes
0answers
56 views

Safety of V2/V3 onions

I have 1 question, lets suppose the attacker got the 1 and the 3rd nodes of Tor circuit. Does using of V3 onion gives us some security benefits? Can attacker be able to disclose V2/V3 resource we are ...
0
votes
0answers
35 views

reduced attack surface when using a minimal window manager for tails?

I'd like to use an alternative window manager (WM) in TAILS. Currently TAILS ships with GNOME, which is a feature-rich and (relatively) user-friendly desktop environment. The reason why the TAILS-team ...
0
votes
1answer
354 views

Viewing videos using Tor Browser & anonimity

In some security guides listed that when you watching videos via Tor your real IP gets or might be disclosed. One of them says "You should turn off media.play-stand-alone and peerconnection....
0
votes
0answers
38 views

Does webrtc and other leaks can be done when scripts is allowed?

Unfortunately, I don't understand correctly how this all things work, but can my IP be leaked when I, for example, clicking to ''allow'' noscript to play http://videoabcd1234.mp4 Can it be run via ...
0
votes
1answer
62 views

Why can't a modified guard node compromise the network?

This is a newbie and probably a lame question but it popped up while I was reading the design doc: https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf If theoretically someone ...
1
vote
0answers
136 views

Firefox Multi-Account Containers on Tor

Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security ...
0
votes
2answers
397 views

Can I permenantly remove package from Tails?

I just deployed tails on a flash drive, and were busy tweaking it. Is it possible to persistently remove some stock software packages from my copy of tails? I tried to apt-get remove them, but they ...
0
votes
1answer
238 views

Has Tor Browser stopped displaying circuits?

I started using Tor v4 most intrigued by the display of the circuit path it followed, 4 nodes from at least 2 countries and usually 3 or 4. Now at v9 I don't see it anymore. Has display of the ...
0
votes
1answer
93 views

Missing History

Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters). What about Tor V1 addresses? What was its specification or why wasn't it used much or at all? Example: ...
0
votes
1answer
91 views

Is the Hidden Answers onion service authentic?

I've been wondering if Hidden Answers is legitimate. Can I talk about anything on that forum no matter how unlawful it may sound? Really I want to know if it it has connections to Law Enforcement or ...
5
votes
2answers
5k views

Use Tor browser as non-root Linux

If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user? Basically have the browser run ...
2
votes
1answer
247 views

Can we trust those who control the directory nodes of Tor?

(I feel insecure in my country after the relays I've been using turned out to be state-compromised. Now I'm starting to doubt the integrity of the directory nodes.) Qu: How do we know for sure that ...
5
votes
3answers
337 views

How can I set up the most useful Tor node?

I've heard of Torservers and Noisetor. I've considered donating to them, but I want to avoid consolidating the Tor network in those two organizations, so I'd like to operate my own Tor node. (I also ...
0
votes
3answers
71 views

Hardening the network on the host

I’m trying to harden my host to not leak anything to clearnet. I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic. ...
0
votes
1answer
199 views

Onion site illegal in my country. Can only visiting get me caught?

People hello, When I visit onion website that are illegal inside my country can I get caught if I have highest security setting no java no script and only browse the website? No opening anything? ...
0
votes
1answer
602 views

Malware detection when installing tor browser

maybe its wrong here, if so, i´m sorry. I tried to install the very first time tor browser for windows german version: torbrowser-install-7.0.4_de from your website https://www.torproject.org/projects/...
0
votes
1answer
130 views

Is watching a video less anonymous?

To my understanding of tor security, it works best if all users send short, equal-sized packets (requests, responses) into the tor network. I'm wondering if I'm watching some video which takes quite ...
1
vote
0answers
22 views

Can a router fake the communication to the next nodes on the path?

I have a theoretical question for understanding the safety of TOR: When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do ...
1
vote
0answers
50 views

What is the difference between the fingerprint and v3ident in auth_dirs.c

auth_dirs contains a list of trusted directory authorities and consists of entrys such: "moria1 orport=9101 " "v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 " "128.31.0.39:9131 9695 DFC3 5FFE ...
0
votes
0answers
26 views

Unable to connect Tor browser inside AD client

I'm trying to connect Tor inside the corporate IT network. The workstations are connected through the proxy server and firewall. When the connection failed with 'Connection timeout' error, I tried to ...
0
votes
1answer
87 views

Is websites/services hosted on tor network safe?

I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it. My question ...
0
votes
2answers
160 views

Does my ISP know if I upload files to a specific site when im using tor/whonix? Can it track all the traffic?

As in the title. I want to know If my ISP can see all the traffic if Its a brand new computer with no cookies and previous activities, using linux and a virtual machine - whonix and tor.
1
vote
0answers
45 views

using autentication with torsocks --address

On Linux, I noticed I can run torsocks by specifying --address so that it connects to another computer and use that computer's tor connection, e.g downloading a file over tor: torsocks --address my....
0
votes
1answer
337 views

Is Tor completely anonymous?

I saw that tor has three layers of encryptions and, plus a VPN I set myself on my computer. How can someone trace back to my real IP? Is this completely anonymous?
0
votes
1answer
75 views

Is there guarantee of privacy to buy onion hosting?

I see many people owning a onion site uses his own server (maybe just place the server in his home?) But traditionally for a regular non-onion site we usually buy hosting. Can I buy hosting for a ...
0
votes
2answers
126 views

TOR questions and concerns

1) ISPs request bridges and blacklist them, that means obfs4 connections could be listed as Tor, does that mean the ISP is able to see the obfs4 IP and connect your activities to Tor just like ...
3
votes
1answer
363 views

How did the FBI find the IP address of the Freedom Hosting servers?

The FBI took over the Freedom Hosting servers, which were located in France, and arrested the guy (Eric Eoin Marques) running Freedom Hosting. They then proceed to serve malware to anyone who ...
1
vote
0answers
61 views

File Quarantined by Anti-Virus Software from the Latest Upgrade of Tor Browser

I upgraded to the lastest version of Tor browser 9.0, and my antivirus software 360 Safeguard reported the file nssdbm3.dll being infected by trojan win32/Trojan.7be Could anybody tell me if this is ...
21
votes
8answers
31k views

Can Tor be used with applications other than Web browsers?

From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc? (Please explain ...
4
votes
1answer
1k views

DNS over HTTPS and Tor

Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...

1
2
3 4 5
10