Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
1
vote
1answer
153 views

Additional Tor security at the client's network perimeter

I have been studying Tor and its related security issues recently, and have some questions. Aren't the most effective recent attacks on Tor, actually attacks on the browser (or plugins), rather than ...
3
votes
1answer
2k views

How to sandbox/harden tor browser bundle?

A few months ago the user Canonizing Ironize suggested: Run tor-browser-bundle with another user Create a new network namespace so the process only sees the local loopback device, create a read-...
0
votes
1answer
29 views

firefox can be fingerprinted [closed]

https://www.browserleaks.com/firefox it can be used for both fingerprinting (different users use different OS setups or different Tor versions) and exploiting software vulnerabilities because when ...
3
votes
1answer
345 views

SSL, Mixed Content

https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content Mixed active content is content that has access to all or parts of the Document Object Model of the HTTPS page. This type of ...
1
vote
1answer
94 views

Is there a way to upload information to server using Tor and regular google search will find it? [closed]

Is there a way to upload information to server so there won't be a way to detect its real IP such as by using TOR. In addition, the content of it will be shown in regular browser google search? Is ...
1
vote
0answers
58 views

security checks in tor browser in the form of a capture [duplicate]

How to bypass security checks in tor browser because whenever i enter a site in the address bar of tor browser a security check appears in the form of a capture? So how can i bypass security checks in ...
1
vote
1answer
466 views

How to close tails firewall port?

I need to closing two or more open firewall ports in tails. How can I send the command to do this?
1
vote
1answer
236 views

Why does my TOR exit node say “Unknown country”?

I read one other post similar to my question, but it does not tell me if it is SAFE to use an exit node that comes from an "Unknown country". Is it safe???
0
votes
1answer
1k views

Remove bookmarks from tor browser

I use tor browser and have some bookmarks. Now I want to remove those bookmarks completely. I already tried approach mentioned on this link. I deleted places.sqlite file but all my bookmarks are still ...
2
votes
2answers
123 views

Serious TCP Bug in Linux Systems?

https://threatpost.com/serious-tcp-bug-in-linux-systems-allows-traffic-hijacking/119804/ http://fossbytes.com/linux-distribution-hackable-serious-tcp-bug-report/ I am not clear on how this TCP news ...
7
votes
1answer
26k views

How to properly start tor service

For months I've been using: $ sudo systemctl start tor.service but I just realized we can start tor by simply typing "tor" into a terminal. What's the proper/safest way to start and stop tor.service?...
1
vote
1answer
429 views

Tails firewall rules with static IP configuration

Tails firewall rules with static IP configuration Please note that this question is in relation to the connection it self. The unencrypted part of the connection not the part of the connection that ...
0
votes
1answer
144 views

Can I permenantly remove package from Tails?

I just deployed tails on a flash drive, and were busy tweaking it. Is it possible to persistently remove some stock software packages from my copy of tails? I tried to apt-get remove them, but they ...
2
votes
2answers
368 views

Security of Tor bridges and Captcha

Tor's current CAPTCHA implementation is easily crackable through bots - whether through paid human labour or automatic algorithms with 99.8% accuracy[1]. Although the algorithm by Google is for ...
1
vote
1answer
471 views

How can I bridge Wlan to Ethernet through tor?

Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network? By the way I want to use Linux for doing that. So please don't send me Windows ...
1
vote
1answer
879 views

Does tails have a penetrable firewall?

Does tails have a penetrable firewall? Currently tails firewall has a very complicated structure to it. It is difficult to say if the firewall is penetrable or not. One might think it is not when it ...
1
vote
1answer
78 views

Could Someone attack tails firmware through tails?

Could Someone attack tails firmware through tails? I have noticed that some applications on OS does not require administrative privilege. Such is the browser add-on such as the one that can be used ...
1
vote
1answer
670 views

Using Orbot to mask network traffic

I have a problem with my ISP. I recently changed to a new 'chat-only' provider, which allows only chat applications (i.e. whatsapp, messenger) to be used on his network. Is there any way to use ...
1
vote
0answers
40 views

Using VPN to hide TOR [duplicate]

I've read discussions where some people advocate starting VPN first, then TOR and other recommend start TOR, then run the VPN. Whichever way I connect, if I go to whoer.net or stilllistener.com to ...
0
votes
1answer
93 views

Suspcious IMAP traffic between my machine and a Tor entry node

I was running Wireshark and noticed that my machine sends IMAP requests to 37.187.22.131, which, according to my TorBrowser, is the entry node I'm connected to. Likewise, my machine seems to be ...
2
votes
2answers
8k views

Connection is not secure randomly occurring? [closed]

Here's a couple images of what I'm concerned about. It's directly to the left of the box where you type the website in it looks like an "i" in a circle. http://imgur.com/a/1ACrW
0
votes
2answers
252 views

Weird Message in Orbot logs?

I see something like the following line in log: WARN: Recived 404 Status Code "Not Found" from server [IP:Port] while fetching "/tor/keys/fp/[hash refrence here]" Two very intresting things come ...
2
votes
1answer
633 views

Could someone hack a tails device based on the firmware in it?

Could someone hack a tails device based on the firmware in it? I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
1
vote
1answer
157 views

Does tails work with Mini free Laptops

Does tails work well with mini free laptops. Are there any issues? Such as in proper shutdown. Can you boot Tails from DVD on mini free? Can you boot Tails from USB on mini free? Answer this ...
1
vote
1answer
544 views

Virus Total Online Scanner Says Tor Has a Trojan

I tested Tor Browser with the Virus Total Online Scanner Website and got the message: This is the Trojan by Rising - Trojan.DisguisedAsDocument/Heur!1.A502-8a37qDgkMnL (Cloud) Is this correct, ...
0
votes
1answer
626 views

Open ports in Tor Browser vs other browsers

I checked for open ports using GRC Shields Up website, obtaining a perfect stealth score on the following platforms and browsers (latest version of each one up to 06/06/2016): Windows 7: IE, Chrome, ...
1
vote
1answer
79 views

TOR Anonymity Query [closed]

It is my understanding that TOR was actually created by the CIA, either directly or through some non-governmental entity. I get this information from a reliable source that has a background with the ...
1
vote
1answer
2k views

Is loading wl driver for macbook wifi at start up safe on Tails OS?

I managed to install wl driver on Tails OS and wanted to make it load at boot automatically. To achieve that, I configured the persistent volume to save APT PACKAGES and APT LISTS. Then I edited the ...
1
vote
1answer
218 views

setup done on my windows vps for my .onion website [closed]

hi i was wondering what best security settings you guys could share and how do i setup for my webserver. running window 2008 r2. i do not want any leaking if possible. i understand windows vps is not ...
12
votes
2answers
203 views

Does Tor latency leak location information?

This might be a general question about any anonymizing service, but I'm new here and curious about, but not super familiar with, Tor. Suppose there's a service that engages in some handshake with ...
5
votes
2answers
463 views

What would happen when multiple servers are having the same onion hostname?

I'm concern about uniqueness of the onion sites in terms of finding the right onion hostname and publishing it. How I can be guaranteed that my onion site will be the only one in Tor network with the ...
1
vote
2answers
125 views

Adding a blacklist for known scam sites?

It seems that the issue of fake/spoofed onion sites is becoming more and more of a problem. The situation is such that on some more popular sites an incorrect keystroke may expose the user to ...
0
votes
1answer
2k views

Anonymity on TOR : DisconnectMe versus DuckDuckGo

IMPORTANT QUESTION ABOUT SECURITY - Anonymity on TOR : DisconnectMe versus DuckDuckGo As far as I know DuckDuckGo doesn't keep yoour data but it doesn't mean you are invisible on Internet when you ...
2
votes
0answers
71 views

Tor Browser issue with DuckDuckGo [duplicate]

I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option. I don't know how to remove that to stay on my "...
7
votes
2answers
265 views

Why do Tor hidden service operators bother with SSL/TLS encryption?

Tor hidden services have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal ...
1
vote
1answer
148 views

What are the differences between security levels?

Tor browser has different security levels. What are these and what are the main differences between them?
1
vote
1answer
10 views

Why the set_gid bit in /var/log/tor/?

On debian-based systems, the tor logging directory has the permissions $ ls -ald /var/log/tor/ drwxr-s--- ... /var/log/tor/ Why is this so? Is this a security vulnerability?
0
votes
2answers
103 views

Latest scandals about Tor

I have stumbled upon certain articles that state that imply that Tor no longer safe. For example, This article and this and even this post by Mozilla imply that there is some backdoor known by the ...
0
votes
2answers
348 views

Possibility with malicious endnode, SSL Strip?

I am wondering about the security with TOR, if an end node setup a proxy like Burp Suite and replaced the certificate, does it mean the end node can still see all the packets that had passed through ...
0
votes
1answer
898 views

Is a server's response to a Tor browser query encrypted by the Tor nodes when it transits the Tor circuit in the reverse direction?

If a Tor browser makes a request of a server on the Internet, it will be encrypted several times by the Tor browser before it leaves the client. The destination server, however, will receive only the ...
2
votes
2answers
681 views

When logging into Facebook with Tor: “Your computer needs to be cleaned”

Can't log into Facebook using Tor. They want to install software to 'clean' your computer. I've run 3 different malware programs of my own, plus, I logged into Facebook using another browser and ...
1
vote
1answer
370 views

Is it useful to install DNSCrypt-proxy with Tor?

Is it useful to install DNSCrypt-proxy when we already have Tor? Does the ISP knows my internet queries when I use Tor?
2
votes
1answer
2k views

Deleting Tor bookmarks

Long story short : I don't like the idea of adding bookmarks with Tor, but I accidentally created one by hitting the shortcut. For my knowledge and to prevent further mistakes like this one, where ...
3
votes
2answers
11k views

Security implications of running tails in Virtual machine

So I was suggested to use Tails on a VirtualBox software. But as I was going thru the documentation, I saw this security limitation "Both the host operating system and the virtualization software are ...
1
vote
1answer
387 views

How safe is Tor from drive-by malware?

How do ensure that one's exit node will not send one JS malware (like the forbes.com drive-by download attack?)
0
votes
1answer
162 views

Can a website read out my MAC address using JavaScript even though I use Tor?

If I use a Tor to visit a site with enabled JavaScript, can this website find out my MAC address, monitor serial number, the serial number of the processor etc?
1
vote
1answer
92 views

Add-on for saving in .mht file format

I'd like to save web pages in .mht file format using Tor Browser (https://addons.mozilla.org/en-US/firefox/addon/mozilla-archive-format/) But installing additional addons or plugins into the Tor ...
2
votes
1answer
238 views

ISP & LEO tracking on Tor

I realize this will sound like I am beating a dead horse; however, I've read many, many threads and comments on this topic and am not quiet satisfied. Maybe I'm being too specific and need a more ...
0
votes
1answer
490 views

Send emails to external addresses

I would want to send emails to external addresses from an external web site (for example contact@mywebsite.com or .org etc) from my mail2tor account, but I received the next e-mail: Subject:   ...
3
votes
2answers
805 views

Why does Tails use an insecure memory wiping process

When I shutdown Tails, various standard messages appear including the statement that if the system does not power-off, then it is likely that the memory wiping process has failed. More curiously, I ...