Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
2
votes
1answer
237 views

Tor Exit Relay safe to use?

I have gone against advice and set up an exit relay. Let's face it more are needed and I am happy to help, I have unlimited broadband and can not think of any better way to use it! I wanted to know, ...
1
vote
2answers
306 views

DoS attacking Tor users

Let's say we have two users connected via a socket over Tor. Is there anyway for one user to DoS the other user, maybe by learning their real IP address? My end goal is to design a system that let ...
1
vote
0answers
47 views

Tor time-size attack

What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time ...
4
votes
3answers
199 views

Can Heartbleed in connection with Tor read all my 2GiB ram, or it is limited to the memory already allocated to the SSL process?

If I am using a Tor version that is infected with SSL Heartbleed (CVE-2014-0092) Can someone read my hall 2GiB ram? Or is the damage limited to the memory already allocated to the SSL process? In ...
2
votes
1answer
2k views

Configuring Tor browser to exclude exits with “tor” in hostname

Does anyone know if it's possible to configure Tor Browser to exclude circuits with exit relays whose hostnames contain "tor"? For example, these exit relays are unwanted: Host Name: arachnidefr94....
1
vote
2answers
315 views

Can a college access your Tor browsing history?

It is well known that a college that you are attending has access to your browsing history. Does Tor prevent this injustice?
1
vote
1answer
209 views

Is Tor really secure and anonymous when it is bankrolled by the Government which spy and snoop on it the most? [closed]

After reading the news I doubt the safety of mine and others who use Tor, as one side of the Government is trying to spy and snoop on it and the other side is bankrolling it. Then what prevent the two ...
1
vote
2answers
91 views

For a given app, is using a SocksPort more secure than using a web proxy such as Polipo?

Consider an app that has options for using either a SOCKS5 proxy or a web proxy. Is it more secure to specify a Tor SocksPort, or to install a web proxy, such as Polipo, and to specify the web proxy ...
0
votes
2answers
98 views

Is Tails affected by the GnuTLS Hello Vulnerability (CVE-2014-3466) ? If so, how?

There are reports that many Linux systems are compromised by a recent critical GnuTLS issue. Is Tails affected by this?
1
vote
1answer
49 views

Critroni new bug in Tor

Security experts detected a new kind of Crypto ransomware that uses the Tor network to hide its antics. The so-called “Critroni” has been flogged on underground forums for a few weeks now and is ...
2
votes
1answer
838 views

How to get www.torproject.org signing keys?

Where to get signing keys to verify Tor browser bundle? I'm using Debian Wheezy and cannot find where I can get them to import them using gpg.
1
vote
1answer
191 views

Satellite Broadband - Safe?

I am looking at Tooway Satellite Broadband (20mbps). It beams down to their ground station in Italy. Is this safe to use with Tor?
2
votes
2answers
949 views

Multiple Tor processes to separate client traffic to improve anonymity?

Say you had multiple online accounts of all kinds and you route them all through a local Tor daemon on your computer using SOCKS[45]. I'm wondering if running multiple separate Tor instances that ...
1
vote
0answers
25 views

Do secure channels provide a good means for asking bridges in order to stay annonymous

After going through this post Do utilization of bridges and/or Pluggable Transports bridges hinder anonymity? I ask is there any secure communication channel through which we can receive bridges as ...
1
vote
0answers
44 views

Security leak in TBB 3.6.2! Leaking information about installed fonts

No matter what I do, what add-on I installed up to now. On chrome://stopfingerprinting/content/common/options.html my TBB 3.6.2 reveals exactly what fonts I've installed, making me obviously ...
1
vote
2answers
343 views

Yellow or crossed onion? How can I see that a Tor connection is secure or broken?

In Vidalia, a yellow onion or a gray onion indicated a problem or the end of a Tor connection. How can I follow this in Tor Browser 3.6.2? Is the green onion eventually turning to yellow or does it ...
7
votes
5answers
3k views

Can technicians track my computer which has an image on it if I use Tor?

My laptop is imaged on a school network, which allows the technicians to remotely connect to it, locate it and track what I'm doing if I'm connected to their network, if I use Tor at home (or any ...
3
votes
2answers
2k views

What are advantages and disadvantages of Tor with respect to JonDonym?

Objectively, what are the advantages and disadvantages of Tor with respect to JonDonym (formerly known as JAP) in the sense of security and anonymity?
5
votes
2answers
131 views

Tor security if LE/ISP want me really bad

Let's say LE knows who I am ... they already know I am using Tor. Is there a way for them to create a surveillance from my ISP ? You will say Tor is encrypted except exit relay ... but common to the ...
10
votes
1answer
355 views

How would a registration of the .onion gtld impact the Tor network?

The title pretty much says it all. What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
3
votes
2answers
157 views

Does internet activity of all my browsers remain hidden from ISPs?

After getting connected to Tor, when other internet browsers are configured on socks 127.0.0.1:9150 will their internet activity remain hidden from Internet Service providers and Trackers?
5
votes
4answers
2k views

How safe are Tor users?

Given that Silk Road was just shut down, an article was published stating that: Tor Can't Always Keep You Safe; Just Ask Silk Road ... careful traffic monitoring and a little math you can figure ...
16
votes
1answer
1k views

Is it safe to run an entry node server?

After some research, I found that there are mostly relay (middle) nodes, and less exit and entry nodes. But why? The connection from the client to the entry node is encrypted, so there should be no ...
2
votes
1answer
717 views

Running Tor relay or exit node entirely from RAM memory using initramfs or Live CD

I would like to run several dedicated servers, both relays and exit nodes. I am concerned about two things: The running server being hacked in a way that compromises the anonymity of user. The ...
1
vote
1answer
73 views

What's the extent of the problem of information leaking to exit node

What if I let some identification information (like a page with my real name) leak in a plain http connection and the exit node captures this? Until when it be able to identify me? Till I change the ...
3
votes
2answers
838 views

Is logging into accounts on Tor secure (from a technical viewpoint)?

Reading about the Heartbleed Bug, and the NSA having readable access to the Tor network, I can't really answer this question myself. Is logging into any account on a website using https, in technical ...
1
vote
1answer
81 views

Is it possible to link different uses of Tor by using normal changes to the browser (such as bookmarks)?

Is it possible to link different Tor identies (uses of Tor at different times) by using the Bookmarks, settings of various components of the browser, or cosmetic alterations to the toolbars? It has ...
1
vote
0answers
93 views

OpenSSL ROP hack/backdoor(OBVIOUS)/bug

Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL member/programer Andy Polyakov- still a problem in Tor code?
2
votes
1answer
644 views

McAfee Blocked Incoming Anonymous Proxy

McAfee blocked an incoming connection from an anonymous proxy 37.130.227.133, does anyone know if my PC is now at risk somehow? I was under the impression that this shouldnt happen. Anyone have any ...
7
votes
1answer
217 views

What is this warning in the Tor log?

My Tor log shows this entry. What does this mean? Apr 04 16:08:07.000 [warn] Rejecting INTRODUCE1 on non-OR or non-edge circuit 7503.
1
vote
1answer
246 views

Should people be more careful when running a Tor relay?

I've decided to run a Tor relay (not an exit node) for donating bandwidth to the Tor network. I've modified very few lines of my torrc file, since I'm trying to learn more about the technology but ...
1
vote
0answers
29 views

Is it possible to run all of Tor wirelessly connecting phones like a meshnet? [closed]

I've used an app called tincan on android that allows users to wirelessly connect to pass messages around in a decentralized manner. I know it's already possible to run hidden services on android i ...
3
votes
2answers
320 views

Encrypt traffic between my onion site and exit relays

Is it possible to encrypt all traffic between the last relay and my hidden service site? (I have tried to use an ssl certificate and configure tor like that: HiddenServicePort 443 127.0.0.1:443 but it ...
1
vote
1answer
5k views

How to make Tor use italian only proxy? [duplicate]

I need Tor to use proxy only from Italy,how can I do that?
2
votes
2answers
64 views

Tor security and code upgrade

I want to know how Tor code is actually updated. Who does it? In light of the NSA scandal and the NSA desire to bring down Tor, is there a possibility that the NSA infiltrates Tor code and adds code ...
1
vote
2answers
77 views

Can the relay I connect to expose me?

The way I understand Tor is that the "client" (say me) connects to a relay, and that relay is the only computer they connect to from then on. If that is the case, why can't a hostile relay simply run ...
1
vote
1answer
102 views

Does the Tor network accept clients or relays running customized source code?

In How to implement the modified source code of Tor?, OP may be asking about using a tor binary built from customized source code. The public Tor network rejects customized clients and relays, right?
6
votes
1answer
1k views

How much time they may take to track me down?

What I did: I used Tor Browser Bundle and created a fictitious Facebook account. The Facebook was registered through a fake email, No personal information was given. I uploaded the video and copied ...
2
votes
1answer
395 views

Is Google de-anonymizing me?

I am a regular TBB user. I update TBB as and when updates are available, with at most a delay of a few days. The bundled addons are also updated regularly. I also have the standalone Vidalia package ...
2
votes
3answers
213 views

Can the NSA or similar agencies see where my device is when using Tor?

Can the NSA or similar agencies see where my device is when using Tor? If so, to avoid this, do I need to encrypt my wi-fi as well?
3
votes
2answers
2k views

What is best secure and anonymous OS for hosting Tor or I2P service?

What is best secure and anonymous OS for hosting Tor or I2P service ? ُEditing: i want server OS full support php and mysql I am confused in choosing ٍServer OS (Debian - Ubuntu - Centos - Redhat) ...
1
vote
1answer
382 views

Which provides better security/anonimity: .onion or https?

Some websites have clearnet https and .onion versions, but not both. What are the pros and cons of using each option (assuming they are both accessed over Tor it is important that the data not be read ...
16
votes
2answers
1k views

Is Tor's security compromised if other services are connecting in the clear?

I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
1
vote
1answer
1k views

Is my anonymity compromised when I am in the clearnet with another browser while surfing with Tor? [duplicate]

Sometimes I am surfing anonymously via Tor and parallelly with a regular browser in the clearnet. Is it anyhow unsecure to do so? Should I use Tor exclusively when I want to remain anonymous? (There ...
0
votes
1answer
1k views

Is it recommended to use additional addons to improve privacy?

Would security improve using Firefox extensions with the Tor Bundle (as Ghostery, HTTP Everywhere, Disconnect, DoNotTrackMe, Adblock Plus, Privdog... etc)?
14
votes
3answers
1k views

Are there any vulnerabilities in the process of onion routing?

In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
2
votes
1answer
984 views

Is using Pinned Tabs and Bookmarks bad for Tor Browser?

There are some onion sites I want to keep track of but the URLs are so long. Is using pinned tabs and bookmarks a secure option? Will people be able to track me if I set bookmarks or pin some tabs?
4
votes
2answers
559 views

What is the preferred OS platform with respect to TBB in the sense of minimization of security risks?

Different OS platforms offer advantages and disadvantages in term of security as far as user is concerned. Some maybe open-source, others may not be. Some may have huge user base, others may have a ...
5
votes
1answer
2k views

How to create a private exit node?

I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create "exit node" to relatives who live USA and France so I can have a fully ...
5
votes
1answer
970 views

socks server with “dynamic traffic routing” trought Tor / I2P depending on the extension .i2p .onion

To browse the web, I connect to ssh and make a tunnel to an http proxy (privoxy) who is configured to "route" the traffic depending on the extension, here is an extract of the privoxy config file : ...

1
6 7 8
9
10