Questions tagged [security]
Information about network security
416
questions
1
vote
0answers
84 views
RSA keys explanations
I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the "connection key" is used to establish the TLS ...
0
votes
1answer
249 views
TorButton Security settings: Define custom level
Is there a way to define a custom level in the security settings?
For example I'd like to use the "safer" preset but allow Javascript on HTTP. The reason is that I use a separate JS blocker which ...
0
votes
2answers
337 views
Why did Ross Ulbricht only use public WiFi?
So I was curious. I was reading up on the dark net market the silk road and it mentioned that the “owner” always used Tor through public wifi. Is there any particular benefit from doing that, or was ...
1
vote
0answers
108 views
is it safe to rename firefox.exe?
OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right ...
1
vote
1answer
679 views
Has my Facebook Account been hacked when using Tor?
I use the Tor Browser to access the internet, but when I log into my Facebook account it has been locked and shows a security message from Facebook informing me that someone has tried to log into my ...
0
votes
1answer
364 views
Tor Onions active on Tail , does Electrum use that proxy?
When I open onion relay on Tails , and then open Electrum Wallet on LiveCD Tails
Does that Electrum connected with Tor proxy/network?
Hope some users would help me to explain this things
1
vote
1answer
661 views
Hosting Site as Hidden Service
Is it advisable to host a very lightweight (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service?
I do not expect there to be many users (...
0
votes
1answer
59 views
How Can I Keep My Tor Relay Stable When I Need To Do A Software Update
I run a TOR relay under the name "torland" (http://torstatus.blutmagie.de/router_detail.php?FP=8d90596192e548c8c00fa9e82759f95b875dc99e). Just today, my relay became marked as a stable tor relay ...
1
vote
1answer
973 views
very slow with tor and VPN how do i improve speed and security please? [duplicate]
Hi I have a very slow connection with tor and vpn can u suggest ways to improve both please ?
after that I will do more searches
paul
0
votes
1answer
429 views
security on tails over usb stick
my question concern an attack with following prerequisites:
1) an home router hacked
2) tails installed on usb stick
3) the attacker has got a 0day on linux netfilter stack
the attacker get in on ...
0
votes
1answer
368 views
Tails and Surveilance?
Can the ISP provider know that we are running tails?
As we have bridges in tor-browser is there something like this in tails?
If so then how does it work?
Is there a solution to this vulnerabilty?
0
votes
2answers
195 views
Hosting Tor and Web service on separate machines security issues
I've read that it's best to host Tor and your website service on separate machines and then point your torrc file to your web host (host where website files are stored). It's quite possible that my ...
0
votes
1answer
170 views
How to secure my torrelays against hijacking (debian), bounty $50
I'm running some tor exitrelays with rsyslog off. Does this disable ALL loggin? If no how I disable ALL loggin?
Next to that I want to secure those against hijacking as good as possible. So I was ...
0
votes
2answers
476 views
How do I use TOR on a Windows computer securely?
I'm asking this out of curiosity rather than practicality: If I install TOR on my Windows machine, how do I use it securely without exposing my identity? Also, what if my machine has already contacted ...
0
votes
1answer
221 views
Does Tor Work With Secret Agent
Does Tor Work With Secret Agent? Secret Agent can be found here. Will Tor break and/or is it a bad idea?
0
votes
1answer
100 views
QUESTION ON TOR ANONIMIZATION
I have the following question:
I downloaded a file through Torbrowser, clicking on it I was asked to open an external sw out to Torbrowser.
If i start that sw are still in anonymous mode or not?
0
votes
1answer
93 views
How do Linux global brokers
I have a Linux VPS.
I need to go outside and I try to proxy
export http_proxy="http://127.0.0.1:8123"
export https_proxy="https://127.0.0.1:8123"
But not all agents.
I have an nginx that needs ...
0
votes
1answer
180 views
How could Tor be cracked? [closed]
I've heard that government agencies et al. have not been able to crack Tor. Why have they been unable? What would one have to do to crack Tor? Are there any Tor "stress tests"?
0
votes
1answer
273 views
Is firefox.exe in Tor Browser Bundle on Windows Unsigned?
My HIPS firewall was giving Warnings that firefox.exe in the installed i.e; extracted TOR Browser bundle was unsinged.
I checked using properties of the firefox.exe and sure enough there is no ...
0
votes
2answers
3k views
How to configure Tor Browser to run securely?
A couple of months ago, I was looking at a youtube video and there were some steps to make Tor secure. For example it was suggested that the users should check that pop up windows are blocked, choose ...
0
votes
1answer
1k views
Password protecting the Tor browser
I'd like to password protect the Tor browser on my computer so that others cannot open it without a password. Is there a simple way of doing so? I am on a Mac using OSX. So far, I'm thinking the best ...
1
vote
2answers
1k views
Where can I find the new Tails 3.2 checksum?
I'm looking for the new Tails 3.2 checkums (md5, sha1, sha256, etc).
It seems that there is no way to find it in its own site. Even googling it brings not much information. So there is something I'm ...
0
votes
1answer
388 views
Socks version 22 not recognized. (Tor is not an http proxy.)
Hello everyone. i have a simple question i am using a tor client to connect programmatically to tor via Socks4a. Everything run smoothly but when i tried to add ssl-tls to connect to localhost i got ...
0
votes
1answer
598 views
Prevent traffic correlation/timing attack
When running a hidden service, should the operator run own entry guard?
Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic ...
1
vote
2answers
4k views
asstr.org being redirected (hijacked) to russian website awe-kyle.ru over TOR?
When using a tor browser to connect to asstr.org an unexpected message shows in the browser:
Come visit us at https://www.asstr.org/ to read this story and hundreds of thousands of other works!
...
2
votes
2answers
565 views
Is it save to use Bitcoin over Tor?
Is it safe to make payments with BTC etc. over Tor?
Is it safe to use web wallets (https)?
Is it safe to use desktop wallets (Electrum)?
Could exit node operators steal my login credentials or my ...
1
vote
0answers
40 views
Is the default low security level dangerous? [duplicate]
The default level is set to low which ensures compatibility with most sites and technology but is it dangerous for security and/or for anonymity?
0
votes
1answer
62 views
Should my orport be public facing?
I port scanned my VPS (tor relay) and noticed both port 9001 and 9030 are public facing; accessible to the entire internet. Is this normal? How might a malicious actor interact with these ports? Could ...
0
votes
1answer
214 views
Is it in this case still safe to use Tor
My Macbook Air is to old to use the newer versions of Tor. Is it in this case still safe to use the older Tor version, or do I really have to buy a new computer to use Tor safely?
1
vote
1answer
108 views
NoScript has disabled Ublock's scripts
For some time now NoScript has disabled all Ublock's scripts. I have not this problem on Firefox.
The scripts only work when I put Tor on low level of security. Can I put it on high level and do this: ...
0
votes
1answer
889 views
Your connection is not secure should I add exception
For some time I have been using a site with no problems, as of yesterday
I get this:
Your connection is not secure
The owner of website.net has configured their website improperly. To protect your ...
0
votes
3answers
341 views
Ddos attack on router
Will running Tor help defend against a ddos attack on my router? Will Tor help hide my IP address and keep me online during a ddos attack?
0
votes
2answers
365 views
Malware detection when installing tor browser
maybe its wrong here, if so, i´m sorry.
I tried to install the very first time tor browser for windows german version: torbrowser-install-7.0.4_de
from your website https://www.torproject.org/projects/...
2
votes
2answers
865 views
How can one avoid Tor correlation attacks?
People usually recommend either using a VPN or hosting an entry or exit node in a remote server. But what about proxies and bridges, for example? And are there any other way to avoid correlation ...
0
votes
1answer
221 views
typical way to run tails virtualized on ubuntu?
To run on Ubuntu just use KVM to run tails?
If you are a bit lazy like me, the idea to reboot your system seems
inconvenient. But with the help of QEMU there is an easy to use
alternative ...
3
votes
1answer
206 views
Does facebook's hidden service url mean that collisions are feasible?
https://facebookcorewwwi.onion/
The idea is that the Facebook onion address connects you to Facebook's Core WWW Infrastructure - check the URL again, you'll see what we did there - and it ...
1
vote
0answers
3k views
How to enable javascript in tor browser 7.0.2 [closed]
How do i enable java script on tor browser 7.0.2 so i can see a captcha when signing into a site? I have tried to go into content but there is no option to turn it on/off i have also tried to allow no ...
1
vote
1answer
49 views
What do ORs 'know'?
It is often said that each node 'knows' the preceding and proceding nodes. But what identification information does the node have exactly? Just the IP address? Also, as a result of what protocol does ...
0
votes
1answer
159 views
IP address and staying anonymous?
What identification information does Tor strip besides IP addresses? I realize that, by filtering through ORs, my IP address is no longer identifiable. But what other ID information, besides the data ...
1
vote
0answers
130 views
Hacking Tor in my spy/thriller novel
Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router?
Reason: I’m an aspiring writer, working on a spy-...
0
votes
1answer
122 views
Hacking Tor through RAM
Is it possible to identify the middle router by extracting data from the RAM of the exit router?
1
vote
1answer
102 views
Data saved in Onion Routers
I’m an aspiring writer, working on a spy-thriller novel with Tor as part of the plot. Is it hypothetically possible to hack an individual Onion Router to discover the location of the previous router?
...
1
vote
1answer
308 views
A server behind a physical Tor gateway to hide its location
Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access?
In my world-...
1
vote
0answers
135 views
How to learn Kali anonymously? [closed]
I want to learn Kali, but wanna do this anonymously ?
I want to register on vulnhub and learn Kali solving the CTF, but in same time I want to remain anonymous to vulnhub, in Kali and while ...
0
votes
1answer
90 views
security problem?
I have two versions of TOR on my PC. If I use the one that has security settings at medium - so I can log in here for example - I am getting a continual stream of something from this site: www.cyber-...
1
vote
1answer
218 views
Do physical security keys work with tor (specifically google products)
So I've recently been considering buying a physical security key (specifically this one) and was wondering if I could get it to work with tor seeing as the google support article on physical keys for ...
1
vote
1answer
47 views
Extra security for private forum posts
I'm a complete newby to anything like Tor so please excuse if this is an ignorant question.
We're looking for a way to have a private forum that members can't copy and paste, take screenshots of or ...
1
vote
0answers
266 views
Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?
I have followed steps in this article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites ...
0
votes
1answer
195 views
SSL between onion and web server
I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an ...
1
vote
0answers
55 views
NoScript settings by default have Allow Scripts Globally (dangerous) ticked [duplicate]
I noticed that on occasion my browser has this opened by default when opening Tor Browser bundle and wont allow the appearance tag to work when I select options, but instead doesn't show any. In some ...
