Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0
votes
1answer
118 views

ZeroDay exploits and how do we stay safe from them

Tor is a browser that guarantees anonymity if used properly. But today I stumbled upon a piece of code which is claimed to be a Zero day exploit for Tor browser. It can be located by the following ...
0
votes
2answers
749 views

Routing Bittorrent through a Tor relay…

I am running a non-exit Tor relay on my Windows 10 machine. I have the ORPort as 443, while the SocksPort and ControlPort are 9050 and 9051, respectively. I devote 800 Kbps average, and 950 Kbps to ...
4
votes
3answers
202 views

Is this a security flaw?

Now, this seems almost too obvious, so I assume I must be missing something, but I figure I should run it by the experts first to see. Hypothetical scenario: At 5:18pm, a user using the Tor network ...
1
vote
0answers
117 views

RSA keys explanations

I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
1
vote
3answers
364 views

Infected tails dvd

if a RAT hits my computer and it is NOT the kind that can write to firmware, and I am using my tor tails livecd, and I have no HDD installed on the computer, can this kind of (non-firmware writing) ...
0
votes
1answer
331 views

Is there any vulnerabilities when using socks with tails?

In the tor manual under socks port it states “The SOCKS protocol is unencrypted and (as we use it) unauthenticated” Does the socks protocol used in the loop back interface only or does the Socks ...
1
vote
0answers
183 views

is it safe to rename firefox.exe?

OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right ...
0
votes
1answer
370 views

Is firefox.exe in Tor Browser Bundle on Windows Unsigned?

My HIPS firewall was giving Warnings that firefox.exe in the installed i.e; extracted TOR Browser bundle was unsinged. I checked using properties of the firefox.exe and sure enough there is no ...
0
votes
1answer
101 views

How Can I Keep My Tor Relay Stable When I Need To Do A Software Update

I run a TOR relay under the name "torland" (http://torstatus.blutmagie.de/router_detail.php?FP=8d90596192e548c8c00fa9e82759f95b875dc99e). Just today, my relay became marked as a stable tor relay ...
1
vote
1answer
2k views

very slow with tor and VPN how do i improve speed and security please? [duplicate]

Hi I have a very slow connection with tor and vpn can u suggest ways to improve both please ? after that I will do more searches paul
2
votes
1answer
953 views

Could someone hack a tails device based on the firmware in it?

Could someone hack a tails device based on the firmware in it? I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
0
votes
2answers
306 views

Hosting Tor and Web service on separate machines security issues

I've read that it's best to host Tor and your website service on separate machines and then point your torrc file to your web host (host where website files are stored). It's quite possible that my ...
2
votes
4answers
5k views

Can HTML5 canvas image data reveal the users IP?

I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. ...
0
votes
1answer
112 views

QUESTION ON TOR ANONIMIZATION

I have the following question: I downloaded a file through Torbrowser, clicking on it I was asked to open an external sw out to Torbrowser. If i start that sw are still in anonymous mode or not?
0
votes
1answer
244 views

How could Tor be cracked? [closed]

I've heard that government agencies et al. have not been able to crack Tor. Why have they been unable? What would one have to do to crack Tor? Are there any Tor "stress tests"?
3
votes
2answers
594 views

Is it save to use Bitcoin over Tor?

Is it safe to make payments with BTC etc. over Tor? Is it safe to use web wallets (https)? Is it safe to use desktop wallets (Electrum)? Could exit node operators steal my login credentials or my ...
0
votes
1answer
747 views

Socks version 22 not recognized. (Tor is not an http proxy.)

Hello everyone. i have a simple question i am using a tor client to connect programmatically to tor via Socks4a. Everything run smoothly but when i tried to add ssl-tls to connect to localhost i got ...
3
votes
1answer
250 views

Is it feasible and rational to combine the Tails package and Whonix package to improve the anonymity of the client? And, how to implement it?

Is it feasible and rational to combine the capability of Tails package and Whonix package to improve the anonymity and security of the client? And if so, how one may implement it?
1
vote
1answer
56 views

What do ORs 'know'?

It is often said that each node 'knows' the preceding and proceding nodes. But what identification information does the node have exactly? Just the IP address? Also, as a result of what protocol does ...
1
vote
1answer
120 views

NoScript has disabled Ublock's scripts

For some time now NoScript has disabled all Ublock's scripts. I have not this problem on Firefox. The scripts only work when I put Tor on low level of security. Can I put it on high level and do this: ...
0
votes
1answer
253 views

Is it in this case still safe to use Tor

My Macbook Air is to old to use the newer versions of Tor. Is it in this case still safe to use the older Tor version, or do I really have to buy a new computer to use Tor safely?
1
vote
0answers
49 views

Is the default low security level dangerous? [duplicate]

The default level is set to low which ensures compatibility with most sites and technology but is it dangerous for security and/or for anonymity?
0
votes
1answer
96 views

security problem?

I have two versions of TOR on my PC. If I use the one that has security settings at medium - so I can log in here for example - I am getting a continual stream of something from this site: www.cyber-...
1
vote
3answers
261 views

Can the tor initial client to relay or bridge connection be MITM attacked?

I am not an expert in Wireshark but I was looking at some packets through Wireshark. I noticed that when using a relay that the connection to the directory authority the first few TCP packets such as ...
1
vote
4answers
152 views

Relay streaming a large file

I wanted to download a file of considerable size, let us say 10GB and I sent the GET request to a web server to download that file. I then would get downloaded through the Tor network, through the ...
0
votes
1answer
130 views

Hacking Tor through RAM

Is it possible to identify the middle router by extracting data from the RAM of the exit router?
1
vote
1answer
378 views

A server behind a physical Tor gateway to hide its location

Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access? In my world-...
3
votes
1answer
347 views

Does facebook's hidden service url mean that collisions are feasible?

https://facebookcorewwwi.onion/ The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
0
votes
1answer
417 views

typical way to run tails virtualized on ubuntu?

To run on Ubuntu just use KVM to run tails? If you are a bit lazy like me, the idea to reboot your system seems inconvenient. But with the help of QEMU there is an easy to use alternative ...
1
vote
0answers
3k views

How to enable javascript in tor browser 7.0.2 [closed]

How do i enable java script on tor browser 7.0.2 so i can see a captcha when signing into a site? I have tried to go into content but there is no option to turn it on/off i have also tried to allow no ...
0
votes
1answer
169 views

IP address and staying anonymous?

What identification information does Tor strip besides IP addresses? I realize that, by filtering through ORs, my IP address is no longer identifiable. But what other ID information, besides the data ...
1
vote
1answer
584 views

How can I bridge Wlan to Ethernet through tor?

Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network? By the way I want to use Linux for doing that. So please don't send me Windows ...
1
vote
0answers
137 views

Hacking Tor in my spy/thriller novel

Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router? Reason: I’m an aspiring writer, working on a spy-...
1
vote
1answer
116 views

Data saved in Onion Routers

I’m an aspiring writer, working on a spy-thriller novel with Tor as part of the plot. Is it hypothetically possible to hack an individual Onion Router to discover the location of the previous router? ...
5
votes
3answers
9k views

If I log into facebook with Tor, am I still protected?

I want to be able to log into social networking sites like FB. Do I have to make a new account or will Tor protect my identity still? I think I logged into FB and realized that I might not be ...
1
vote
0answers
146 views

How to learn Kali anonymously? [closed]

I want to learn Kali, but wanna do this anonymously ? I want to register on vulnhub and learn Kali solving the CTF, but in same time I want to remain anonymous to vulnhub, in Kali and while ...
1
vote
1answer
330 views

Do physical security keys work with tor (specifically google products)

So I've recently been considering buying a physical security key (specifically this one) and was wondering if I could get it to work with tor seeing as the google support article on physical keys for ...
7
votes
3answers
14k views

How well-protected am I behind Tor?

I would like a general consensus, idea, or evidential proof of how protected I am from authorities behind Tor. As it stands, am I how much more protected and less likely from getting traced behind ...
1
vote
0answers
277 views

Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?

I have followed steps in this article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites ...
1
vote
0answers
60 views

NoScript settings by default have Allow Scripts Globally (dangerous) ticked [duplicate]

I noticed that on occasion my browser has this opened by default when opening Tor Browser bundle and wont allow the appearance tag to work when I select options, but instead doesn't show any. In some ...
2
votes
1answer
639 views

Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation? [closed]

In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that ...
0
votes
1answer
4k views

Using Paypal with Tor---Ooopsy!

I made the mistake of trying to pay for a VPN service with Paypal while using Tor browser. Paypal said the transaction had gone through. But my bank statement said otherwise. I haven't validated the ...
2
votes
2answers
128 views

Serious TCP Bug in Linux Systems?

https://threatpost.com/serious-tcp-bug-in-linux-systems-allows-traffic-hijacking/119804/ http://fossbytes.com/linux-distribution-hackable-serious-tcp-bug-report/ I am not clear on how this TCP news ...
2
votes
1answer
513 views

Why do entry nodes not know the originator?

I stumbled upon the following text in the article about onion routing on Wikipedia: In this example onion, the source of the data sends the onion to Router A, which removes a layer of encryption ...
2
votes
1answer
201 views

Does Tor prevent people from finding the sites you visited before dowloading Tor, or does it only block your history after downloading Tor?

The title is my question--does Tor block access to your internet browsing history before you download Tor, or does it block access to your internet use after downloading Tor?
1
vote
1answer
1k views

Does tails have a penetrable firewall?

Does tails have a penetrable firewall? Currently tails firewall has a very complicated structure to it. It is difficult to say if the firewall is penetrable or not. One might think it is not when it ...
2
votes
0answers
267 views

Building an Apparmor Profile

I generated an apparmor profile for the tor binary that comes bundled in Ricochet: # Last Modified: Sun Apr 2 2017 #include <tunables/global> /ricochet/*-ricochet/tor { #include <...
2
votes
0answers
357 views

HiddenServiceAuthorizeClient: Difference between 'basic' and 'stealth'? [duplicate]

http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html#HiddenServiceAuthorizeClient The auth-type can either be 'basic' for a general-purpose authorization protocol or 'stealth' for a less scalable ...
0
votes
1answer
1k views

What is more secure: Tails or Subgraph? [closed]

What is more secure: Tails or Subgraph? (Subgraph has a live CD/USB option making it like Tails)
2
votes
2answers
173 views

Does all bridge users have the same encryption key?

When I connect to a bridge is my encryption key the same as the encryption key for all other users to the same bridge or does the encryption key differ from one user to another for that same bridge? ...

1 2 3
4
5
10