Questions tagged [security]
Information about network security
476
questions
8
votes
2
answers
861
views
Can using Tor make you a suspect?
When you are browsing regular WWW through Tor last node's (exit node's) IP is known to the server, also exit node's ISP can observe the traffic.
So if somebody is browsing sites with illegal content (...
2
votes
1
answer
142
views
How is relay information obtained after running Tor?
Let's assume that the NSA can't attack all Tor nodes at once, and someone using Tor is anonymous this way, but how does Tor actually download these secure Tor nodes when we open it? I mean does Tor ...
11
votes
1
answer
386
views
How would a registration of the .onion gtld impact the Tor network?
The title pretty much says it all.
What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
2
votes
0
answers
63
views
Can clear activity be linked to hidden activity? [duplicate]
I'm using whonix for a good deal of activity but I'm very new to it and Linux. will using my computer for personal information while not running whonix or tor compromise my anonymity? What about at ...
2
votes
2
answers
4k
views
Tor executable file location not found on startup and new file folders created in TBB directory not part of installation
Yesterday I tried to start TBB and got a message saying that the executable file could not be found. I clicked the link in Vidalia settings and it shows the the location for the exe file being in ...
5
votes
3
answers
351
views
How can I set up the most useful Tor node?
I've heard of Torservers and Noisetor. I've considered donating to them, but I want to avoid consolidating the Tor network in those two organizations, so I'd like to operate my own Tor node. (I also ...
3
votes
2
answers
2k
views
What is the overall safest way to use Tor?
I have reason to believe that I my status or activities place me at particular risk. I would like to do everything that I can to keep safe while using Tor. I think that I should get a dedicated ...
11
votes
1
answer
690
views
How should I verify Tor downloads?
When I go to https://www.torproject.org/download/download.html to download the Tor Browser for Windows, how can I be sure that the package I'm downloading is genuine, and hasn't been tampered with?
...
4
votes
1
answer
547
views
I want to setup my own Tor implemintation, what should I take for?
I have download latest source.
Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only?
How much nodes should I setup around the world for small group of confederates?
1
vote
1
answer
161
views
Is this possible and if so would it be useful to cracking some hidden services? [closed]
I found this on StackOverflow and I found it interesting... If this is possible wouldn't this be so useful to the feds?
It asks can you get the server ip address from a mysql database for a login ...
5
votes
2
answers
2k
views
Is it posible to choose what entry node you want to use?
If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
8
votes
1
answer
3k
views
What is the difference between NTor and TAP?
Recently I read that Tor switched from TAP handshake requests to NTor handshake requests. This seems to improve the performance and doesn't put such a high load on relays (because of Mevade). However ...
10
votes
3
answers
459
views
Is it secure to set the contact information when building up a Tor relay?
When I am setting up a tor relay, one option is to determine the contact information as an email address. Is it secure considering information harvesting by NSA for instance or would be better to hide ...
5
votes
4
answers
2k
views
How safe are Tor users?
Given that Silk Road was just shut down, an article was published stating that:
Tor Can't Always Keep You Safe; Just Ask Silk Road ... careful traffic monitoring and a little math you can figure ...
5
votes
1
answer
156
views
Are virtual servers like Tor Cloud less advisable?
It's probably not difficult to extract Tor encryption keys from storage or memory on virtual hardware like EC2 instances. Similar issues likely exist for rented physical servers with management access....
9
votes
4
answers
356
views
May I do security inspection on exit relays?
If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
8
votes
1
answer
280
views
Who can see my bridge's ContactInfo?
I'm guessing that a bridge uploads its ContactInfo to the bridge authority, so there's a point of contact for the Tor project.
Is this information available to any other parties, i.e. users ...
14
votes
2
answers
622
views
Are there trustworthy third-party audits of the Tor source code?
Was the Tor source code trustworthily audited by a third party to check if it does not contain a back-door?
Are such audit results freely available?
21
votes
8
answers
33k
views
Can Tor be used with applications other than Web browsers?
From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc?
(Please explain ...
14
votes
3
answers
1k
views
Are there any vulnerabilities in the process of onion routing?
In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
16
votes
2
answers
1k
views
Is Tor's security compromised if other services are connecting in the clear?
I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
16
votes
3
answers
3k
views
Can government agencies track what sites I'm visiting when using Tor?
Can agencies such as the NSA or GCHQ track what websites I'm visiting if I'm using the Tor Browser Bundle? What about hidden services?
16
votes
1
answer
1k
views
Is it safe to run an entry node server?
After some research, I found that there are mostly relay (middle) nodes, and less exit and entry nodes. But why? The connection from the client to the entry node is encrypted, so there should be no ...
27
votes
5
answers
13k
views
Securely hosting a Tor hidden service/site
There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
15
votes
5
answers
3k
views
Aside from disabling Javascript in Firefox, how can I make Tor Browser Bundle more secure?
In a recent Tor security advisory, Roger Dingledine writes:
Consider disabling JavaScript (click the blue
"S" beside the green onion, and select "Forbid Scripts Globally").
Disabling ...
2
votes
0
answers
163
views
Are there any good practices to keep my Tor relay's private key safe? [closed]
Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe?
We can take for granted that software packages constantly ...