Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
1
vote
0answers
90 views

OpenSSL ROP hack/backdoor(OBVIOUS)/bug

Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL member/programer Andy Polyakov- still a problem in Tor code?
2
votes
1answer
640 views

McAfee Blocked Incoming Anonymous Proxy

McAfee blocked an incoming connection from an anonymous proxy 37.130.227.133, does anyone know if my PC is now at risk somehow? I was under the impression that this shouldnt happen. Anyone have any ...
7
votes
1answer
208 views

What is this warning in the Tor log?

My Tor log shows this entry. What does this mean? Apr 04 16:08:07.000 [warn] Rejecting INTRODUCE1 on non-OR or non-edge circuit 7503.
1
vote
1answer
238 views

Should people be more careful when running a Tor relay?

I've decided to run a Tor relay (not an exit node) for donating bandwidth to the Tor network. I've modified very few lines of my torrc file, since I'm trying to learn more about the technology but ...
1
vote
0answers
28 views

Is it possible to run all of Tor wirelessly connecting phones like a meshnet? [closed]

I've used an app called tincan on android that allows users to wirelessly connect to pass messages around in a decentralized manner. I know it's already possible to run hidden services on android i ...
3
votes
2answers
288 views

Encrypt traffic between my onion site and exit relays

Is it possible to encrypt all traffic between the last relay and my hidden service site? (I have tried to use an ssl certificate and configure tor like that: HiddenServicePort 443 127.0.0.1:443 but it ...
1
vote
1answer
5k views

How to make Tor use italian only proxy? [duplicate]

I need Tor to use proxy only from Italy,how can I do that?
2
votes
2answers
64 views

Tor security and code upgrade

I want to know how Tor code is actually updated. Who does it? In light of the NSA scandal and the NSA desire to bring down Tor, is there a possibility that the NSA infiltrates Tor code and adds code ...
1
vote
2answers
75 views

Can the relay I connect to expose me?

The way I understand Tor is that the "client" (say me) connects to a relay, and that relay is the only computer they connect to from then on. If that is the case, why can't a hostile relay simply run ...
1
vote
1answer
96 views

Does the Tor network accept clients or relays running customized source code?

In How to implement the modified source code of Tor?, OP may be asking about using a tor binary built from customized source code. The public Tor network rejects customized clients and relays, right?
6
votes
1answer
1k views

How much time they may take to track me down?

What I did: I used Tor Browser Bundle and created a fictitious Facebook account. The Facebook was registered through a fake email, No personal information was given. I uploaded the video and copied ...
2
votes
1answer
375 views

Is Google de-anonymizing me?

I am a regular TBB user. I update TBB as and when updates are available, with at most a delay of a few days. The bundled addons are also updated regularly. I also have the standalone Vidalia package ...
2
votes
3answers
202 views

Can the NSA or similar agencies see where my device is when using Tor?

Can the NSA or similar agencies see where my device is when using Tor? If so, to avoid this, do I need to encrypt my wi-fi as well?
3
votes
2answers
2k views

What is best secure and anonymous OS for hosting Tor or I2P service?

What is best secure and anonymous OS for hosting Tor or I2P service ? ُEditing: i want server OS full support php and mysql I am confused in choosing ٍServer OS (Debian - Ubuntu - Centos - Redhat) ...
1
vote
1answer
371 views

Which provides better security/anonimity: .onion or https?

Some websites have clearnet https and .onion versions, but not both. What are the pros and cons of using each option (assuming they are both accessed over Tor it is important that the data not be read ...
15
votes
2answers
1k views

Is Tor's security compromised if other services are connecting in the clear?

I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
1
vote
1answer
1k views

Is my anonymity compromised when I am in the clearnet with another browser while surfing with Tor? [duplicate]

Sometimes I am surfing anonymously via Tor and parallelly with a regular browser in the clearnet. Is it anyhow unsecure to do so? Should I use Tor exclusively when I want to remain anonymous? (There ...
0
votes
1answer
1k views

Is it recommended to use additional addons to improve privacy?

Would security improve using Firefox extensions with the Tor Bundle (as Ghostery, HTTP Everywhere, Disconnect, DoNotTrackMe, Adblock Plus, Privdog... etc)?
13
votes
3answers
1k views

Are there any vulnerabilities in the process of onion routing?

In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
2
votes
1answer
824 views

Is using Pinned Tabs and Bookmarks bad for Tor Browser?

There are some onion sites I want to keep track of but the URLs are so long. Is using pinned tabs and bookmarks a secure option? Will people be able to track me if I set bookmarks or pin some tabs?
4
votes
2answers
554 views

What is the preferred OS platform with respect to TBB in the sense of minimization of security risks?

Different OS platforms offer advantages and disadvantages in term of security as far as user is concerned. Some maybe open-source, others may not be. Some may have huge user base, others may have a ...
5
votes
1answer
1k views

How to create a private exit node?

I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
5
votes
1answer
882 views

socks server with “dynamic traffic routing” trought Tor / I2P depending on the extension .i2p .onion

To browse the web, I connect to ssh and make a tunnel to an http proxy (privoxy) who is configured to "route" the traffic depending on the extension, here is an extract of the privoxy config file : ...
3
votes
1answer
181 views

Would using Tor help keep hackers from getting passwords or other private info?

Would Tor help protect against hacks/ID theft? My particular concern is for when Windows XP security patches are no longer available as I really don't want to upgrade my OS.
6
votes
2answers
1k views

How can I improve my SSL/TLS security?

I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was ...
3
votes
1answer
353 views

I noticed direct connection to exit node (really disturbing). Security issue?

My tor exit node was 31.172.30.4:443 and at the same time I observed direct connection established to this IP TCP 192.168.1.xx:xxxxx->31.172.30.4:443 (ESTABLISHED) Maybe my knowledge on tor is ...
2
votes
2answers
491 views

Even after disabling Java Script Fonts are readable. Is there any patch for this issue?

Even after disabling Java Script Fonts are indirectly readable. Is there any patch for this issue? This is a warning I get from a test site. Your installed fonts are indirectly readable by this ...
6
votes
1answer
207 views

How do I report a security issue to the Tor project?

I have found a security issue in Tor which allows for information leakage in certain scenarios. I went to report this to the Tor project, but found nothing more than a bug tracker, and no obvious ...
3
votes
1answer
107 views

I do not see a warning anymore when downloading a PDF file!

Tor Browser Bundle version 3.5 for windows does not show any warning when a PDF file is about to download. Is it a feature or a Bug?
1
vote
0answers
241 views

Risky Connection? [closed]

While browsing on Tor this evening. I received a message from either windows security center or mcafee stating that they had blocked a "risky connection" coming from an "anonymous proxy" I didnt get a ...
2
votes
2answers
725 views

ISP, WiFi, Tracking [duplicate]

I run Tor on my laptop and my phone. I have Verizon Wireless for a service provider. My laptop Internet connection is tethered through my cell phone. So I just run Tor on my laptop. Can Verizon or any ...
1
vote
2answers
126 views

How vulnerable would Tor users be if a single entity controlled a large number of nodes?

There 4626 relays online. What is stopping a single entity from adding, say, 9000 relays to the network around the world so they can occasionally watch bits of the network? If the cost of this is ...
2
votes
1answer
126 views

How is relay information obtained after running Tor?

Let's assume that the NSA can't attack all Tor nodes at once, and someone using Tor is anonymous this way, but how does Tor actually download these secure Tor nodes when we open it? I mean does Tor ...
9
votes
4answers
338 views

May I do security inspection on exit relays?

If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
2
votes
0answers
61 views

Can clear activity be linked to hidden activity? [duplicate]

I'm using whonix for a good deal of activity but I'm very new to it and Linux. will using my computer for personal information while not running whonix or tor compromise my anonymity? What about at ...
2
votes
2answers
4k views

Tor executable file location not found on startup and new file folders created in TBB directory not part of installation

Yesterday I tried to start TBB and got a message saying that the executable file could not be found. I clicked the link in Vidalia settings and it shows the the location for the exe file being in ...
11
votes
1answer
627 views

How should I verify Tor downloads?

When I go to https://www.torproject.org/download/download.html to download the Tor Browser for Windows, how can I be sure that the package I'm downloading is genuine, and hasn't been tampered with? ...
3
votes
2answers
2k views

What is the overall safest way to use Tor?

I have reason to believe that I my status or activities place me at particular risk. I would like to do everything that I can to keep safe while using Tor. I think that I should get a dedicated ...
4
votes
1answer
522 views

I want to setup my own Tor implemintation, what should I take for?

I have download latest source. Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only? How much nodes should I setup around the world for small group of confederates?
1
vote
1answer
152 views

Is this possible and if so would it be useful to cracking some hidden services? [closed]

I found this on StackOverflow and I found it interesting... If this is possible wouldn't this be so useful to the feds? It asks can you get the server ip address from a mysql database for a login ...
5
votes
2answers
2k views

Is it posible to choose what entry node you want to use?

If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
10
votes
3answers
374 views

Is it secure to set the contact information when building up a Tor relay?

When I am setting up a tor relay, one option is to determine the contact information as an email address. Is it secure considering information harvesting by NSA for instance or would be better to hide ...
5
votes
1answer
153 views

Are virtual servers like Tor Cloud less advisable?

It's probably not difficult to extract Tor encryption keys from storage or memory on virtual hardware like EC2 instances. Similar issues likely exist for rented physical servers with management access....
8
votes
1answer
225 views

Who can see my bridge's ContactInfo?

I'm guessing that a bridge uploads its ContactInfo to the bridge authority, so there's a point of contact for the Tor project. Is this information available to any other parties, i.e. users ...
2
votes
0answers
137 views

Are there any good practices to keep my Tor relay's private key safe? [closed]

Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe? We can take for granted that software packages constantly ...

1
5 6 7 8
9