Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
1
vote
1answer
1k views

Is Tor network traceable

I am curious how I can rely on Tor network in terms of traceability. I am looking for really professional who can say if my Tor communication is secure, if a Tor exit node is detectable or traceable....
1
vote
0answers
51 views

can one tab “look” at it's nighbor tab and 'read' its data?

I am on Linux. I use Tor mainly to browse on high(er) risk sites, like torrents and such. Would it be safe to run my gmail account on one tab (of Tor) and on the other tab, to get into a "risky ...
2
votes
1answer
181 views

Does Tor Browser allow non-Tor content (http/https) on .onion sites?

Does Tor Browser allow non-Tor content (http/https) on .onion sites? Suppose I visit somesite.onion and it has .css or .js or image with source from usual http/https site. Will it load it? Or ...
0
votes
2answers
499 views

How do I use TOR on a Windows computer securely?

I'm asking this out of curiosity rather than practicality: If I install TOR on my Windows machine, how do I use it securely without exposing my identity? Also, what if my machine has already contacted ...
1
vote
1answer
39 views

Rekeying a Tor circuit

Is it possible to rekey a connection between a Tor client and a relay? By rekey I mean perform the usual x25519 key exchange to change the session key on the fly, without tearing the circuit down.
4
votes
4answers
18k views

Is using Tor on Windows dangerous?

One of my friends keeps telling me that it's useless to use Tor on Windows, as Windows is full of key-loggers, Trojans and other malware, and if they want to identify me it will be easy because of ...
0
votes
3answers
172 views

ultimate encryption and protection of sensitive data

I have many sensitive documentation which I am scared to lose or get somebody accessed. My question would be what is the ultimate encryption protection? I have read lot of articles saying that for ...
0
votes
2answers
70 views

How save is Tor and there relays?

What if i run a relay and a person downloads illegal content? Example: Like child porn that goes past my relay? In general speaking i am just as bad as the person that downloads such content. So even ...
0
votes
1answer
9k views
2
votes
2answers
1k views

How can one avoid Tor correlation attacks?

People usually recommend either using a VPN or hosting an entry or exit node in a remote server. But what about proxies and bridges, for example? And are there any other way to avoid correlation ...
3
votes
2answers
4k views

safe to use tails on deskop computer while using wifi connection on cell phone?

Basically I have a router which allows wired and wifi connections. I'm using Tails on my desktop computer through a wired connection. We have cell phones that then accesses the wifi on the same ...
1
vote
1answer
428 views

Why is it when i go to .onion sites that I'm told that my connection is not secure or encrytped?

Okay so I'm fairly new to actually using Tor, but I have known about it for years. I have read many things on how to stay secure and anonymous while on Tor. I also have the Tor browser security ...
1
vote
2answers
513 views

Best set-up to navigate the dark web anonymously

OK so I'm fairly new but a very fast learner and I investigate everything before I jump and do something. So my questions is this: What's the best set-up? I have a Mac and was thinking of just ...
0
votes
1answer
64 views

Should my orport be public facing?

I port scanned my VPS (tor relay) and noticed both port 9001 and 9030 are public facing; accessible to the entire internet. Is this normal? How might a malicious actor interact with these ports? Could ...
0
votes
1answer
918 views

Your connection is not secure should I add exception

For some time I have been using a site with no problems, as of yesterday I get this: Your connection is not secure The owner of website.net has configured their website improperly. To protect your ...
0
votes
1answer
395 views

Tails and Surveilance?

Can the ISP provider know that we are running tails? As we have bridges in tor-browser is there something like this in tails? If so then how does it work? Is there a solution to this vulnerabilty?
0
votes
2answers
388 views

Why did Ross Ulbricht only use public WiFi?

So I was curious. I was reading up on the dark net market the silk road and it mentioned that the “owner” always used Tor through public wifi. Is there any particular benefit from doing that, or was ...
1
vote
1answer
133 views

How does Tor pass the router?

Here's the story. When I run Tor software, in theory my computer becomes a relay, so user x sends some data to my computer and my computer passes that data to user y and vice versa. This is ...
0
votes
2answers
3k views

How to configure Tor Browser to run securely?

A couple of months ago, I was looking at a youtube video and there were some steps to make Tor secure. For example it was suggested that the users should check that pop up windows are blocked, choose ...
0
votes
1answer
116 views

ZeroDay exploits and how do we stay safe from them

Tor is a browser that guarantees anonymity if used properly. But today I stumbled upon a piece of code which is claimed to be a Zero day exploit for Tor browser. It can be located by the following ...
0
votes
2answers
625 views

Routing Bittorrent through a Tor relay…

I am running a non-exit Tor relay on my Windows 10 machine. I have the ORPort as 443, while the SocksPort and ControlPort are 9050 and 9051, respectively. I devote 800 Kbps average, and 950 Kbps to ...
4
votes
3answers
198 views

Is this a security flaw?

Now, this seems almost too obvious, so I assume I must be missing something, but I figure I should run it by the experts first to see. Hypothetical scenario: At 5:18pm, a user using the Tor network ...
1
vote
0answers
108 views

RSA keys explanations

I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
1
vote
1answer
858 views

Has my Facebook Account been hacked when using Tor?

I use the Tor Browser to access the internet, but when I log into my Facebook account it has been locked and shows a security message from Facebook informing me that someone has tried to log into my ...
1
vote
3answers
358 views

Infected tails dvd

if a RAT hits my computer and it is NOT the kind that can write to firmware, and I am using my tor tails livecd, and I have no HDD installed on the computer, can this kind of (non-firmware writing) ...
0
votes
1answer
319 views

Is there any vulnerabilities when using socks with tails?

In the tor manual under socks port it states “The SOCKS protocol is unencrypted and (as we use it) unauthenticated” Does the socks protocol used in the loop back interface only or does the Socks ...
1
vote
0answers
139 views

is it safe to rename firefox.exe?

OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right ...
0
votes
1answer
330 views

Is firefox.exe in Tor Browser Bundle on Windows Unsigned?

My HIPS firewall was giving Warnings that firefox.exe in the installed i.e; extracted TOR Browser bundle was unsinged. I checked using properties of the firefox.exe and sure enough there is no ...
0
votes
1answer
78 views

How Can I Keep My Tor Relay Stable When I Need To Do A Software Update

I run a TOR relay under the name "torland" (http://torstatus.blutmagie.de/router_detail.php?FP=8d90596192e548c8c00fa9e82759f95b875dc99e). Just today, my relay became marked as a stable tor relay ...
1
vote
1answer
1k views

very slow with tor and VPN how do i improve speed and security please? [duplicate]

Hi I have a very slow connection with tor and vpn can u suggest ways to improve both please ? after that I will do more searches paul
2
votes
1answer
748 views

Could someone hack a tails device based on the firmware in it?

Could someone hack a tails device based on the firmware in it? I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
0
votes
2answers
264 views

Hosting Tor and Web service on separate machines security issues

I've read that it's best to host Tor and your website service on separate machines and then point your torrc file to your web host (host where website files are stored). It's quite possible that my ...
2
votes
4answers
5k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
0
votes
1answer
106 views

QUESTION ON TOR ANONIMIZATION

I have the following question: I downloaded a file through Torbrowser, clicking on it I was asked to open an external sw out to Torbrowser. If i start that sw are still in anonymous mode or not?
0
votes
1answer
191 views

How could Tor be cracked? [closed]

I've heard that government agencies et al. have not been able to crack Tor. Why have they been unable? What would one have to do to crack Tor? Are there any Tor "stress tests"?
2
votes
2answers
582 views

Is it save to use Bitcoin over Tor?

Is it safe to make payments with BTC etc. over Tor? Is it safe to use web wallets (https)? Is it safe to use desktop wallets (Electrum)? Could exit node operators steal my login credentials or my ...
0
votes
1answer
535 views

Socks version 22 not recognized. (Tor is not an http proxy.)

Hello everyone. i have a simple question i am using a tor client to connect programmatically to tor via Socks4a. Everything run smoothly but when i tried to add ssl-tls to connect to localhost i got ...
3
votes
1answer
234 views

Is it feasible and rational to combine the Tails package and Whonix package to improve the anonymity of the client? And, how to implement it?

Is it feasible and rational to combine the capability of Tails package and Whonix package to improve the anonymity and security of the client? And if so, how one may implement it?
1
vote
1answer
52 views

What do ORs 'know'?

It is often said that each node 'knows' the preceding and proceding nodes. But what identification information does the node have exactly? Just the IP address? Also, as a result of what protocol does ...
1
vote
1answer
112 views

NoScript has disabled Ublock's scripts

For some time now NoScript has disabled all Ublock's scripts. I have not this problem on Firefox. The scripts only work when I put Tor on low level of security. Can I put it on high level and do this: ...
0
votes
1answer
229 views

Is it in this case still safe to use Tor

My Macbook Air is to old to use the newer versions of Tor. Is it in this case still safe to use the older Tor version, or do I really have to buy a new computer to use Tor safely?
1
vote
0answers
43 views

Is the default low security level dangerous? [duplicate]

The default level is set to low which ensures compatibility with most sites and technology but is it dangerous for security and/or for anonymity?
0
votes
1answer
94 views

security problem?

I have two versions of TOR on my PC. If I use the one that has security settings at medium - so I can log in here for example - I am getting a continual stream of something from this site: www.cyber-...
1
vote
3answers
244 views

Can the tor initial client to relay or bridge connection be MITM attacked?

I am not an expert in Wireshark but I was looking at some packets through Wireshark. I noticed that when using a relay that the connection to the directory authority the first few TCP packets such as ...
1
vote
4answers
140 views

Relay streaming a large file

I wanted to download a file of considerable size, let us say 10GB and I sent the GET request to a web server to download that file. I then would get downloaded through the Tor network, through the ...
0
votes
1answer
124 views

Hacking Tor through RAM

Is it possible to identify the middle router by extracting data from the RAM of the exit router?
1
vote
1answer
350 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
3
votes
1answer
245 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
0
votes
1answer
274 views

typical way to run tails virtualized on ubuntu?

To run on Ubuntu just use KVM to run tails? If you are a bit lazy like me, the idea to reboot your system seems inconvenient. But with the help of QEMU there is an easy to use alternative ...
1
vote
0answers
3k views

How to enable javascript in tor browser 7.0.2 [closed]

How do i enable java script on tor browser 7.0.2 so i can see a captcha when signing into a site? I have tried to go into content but there is no option to turn it on/off i have also tried to allow no ...

1 2
3
4 5
9