Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0
votes
1answer
723 views

Open ports in Tor Browser vs other browsers

I checked for open ports using GRC Shields Up website, obtaining a perfect stealth score on the following platforms and browsers (latest version of each one up to 06/06/2016): Windows 7: IE, Chrome, ...
1
vote
1answer
83 views

TOR Anonymity Query [closed]

It is my understanding that TOR was actually created by the CIA, either directly or through some non-governmental entity. I get this information from a reliable source that has a background with the ...
2
votes
1answer
2k views

Is loading wl driver for macbook wifi at start up safe on Tails OS?

I managed to install wl driver on Tails OS and wanted to make it load at boot automatically. To achieve that, I configured the persistent volume to save APT PACKAGES and APT LISTS. Then I edited the ...
1
vote
1answer
235 views

setup done on my windows vps for my .onion website [closed]

hi i was wondering what best security settings you guys could share and how do i setup for my webserver. running window 2008 r2. i do not want any leaking if possible. i understand windows vps is not ...
12
votes
2answers
220 views

Does Tor latency leak location information?

This might be a general question about any anonymizing service, but I'm new here and curious about, but not super familiar with, Tor. Suppose there's a service that engages in some handshake with ...
6
votes
2answers
564 views

What would happen when multiple servers are having the same onion hostname?

I'm concern about uniqueness of the onion sites in terms of finding the right onion hostname and publishing it. How I can be guaranteed that my onion site will be the only one in Tor network with the ...
1
vote
2answers
132 views

Adding a blacklist for known scam sites?

It seems that the issue of fake/spoofed onion sites is becoming more and more of a problem. The situation is such that on some more popular sites an incorrect keystroke may expose the user to ...
0
votes
1answer
3k views

Anonymity on TOR : DisconnectMe versus DuckDuckGo

IMPORTANT QUESTION ABOUT SECURITY - Anonymity on TOR : DisconnectMe versus DuckDuckGo As far as I know DuckDuckGo doesn't keep yoour data but it doesn't mean you are invisible on Internet when you ...
2
votes
0answers
78 views

Tor Browser issue with DuckDuckGo [duplicate]

I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option. I don't know how to remove that to stay on my "...
7
votes
2answers
385 views

Why do Tor hidden service operators bother with SSL/TLS encryption?

Tor hidden services have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal ...
1
vote
1answer
168 views

What are the differences between security levels?

Tor browser has different security levels. What are these and what are the main differences between them?
1
vote
1answer
12 views

Why the set_gid bit in /var/log/tor/?

On debian-based systems, the tor logging directory has the permissions $ ls -ald /var/log/tor/ drwxr-s--- ... /var/log/tor/ Why is this so? Is this a security vulnerability?
0
votes
2answers
116 views

Latest scandals about Tor

I have stumbled upon certain articles that state that imply that Tor no longer safe. For example, This article and this and even this post by Mozilla imply that there is some backdoor known by the ...
0
votes
2answers
401 views

Possibility with malicious endnode, SSL Strip?

I am wondering about the security with TOR, if an end node setup a proxy like Burp Suite and replaced the certificate, does it mean the end node can still see all the packets that had passed through ...
0
votes
1answer
1k views

Is a server's response to a Tor browser query encrypted by the Tor nodes when it transits the Tor circuit in the reverse direction?

If a Tor browser makes a request of a server on the Internet, it will be encrypted several times by the Tor browser before it leaves the client. The destination server, however, will receive only the ...
2
votes
2answers
799 views

When logging into Facebook with Tor: “Your computer needs to be cleaned”

Can't log into Facebook using Tor. They want to install software to 'clean' your computer. I've run 3 different malware programs of my own, plus, I logged into Facebook using another browser and ...
1
vote
1answer
458 views

Is it useful to install DNSCrypt-proxy with Tor?

Is it useful to install DNSCrypt-proxy when we already have Tor? Does the ISP knows my internet queries when I use Tor?
2
votes
1answer
2k views

Deleting Tor bookmarks

Long story short : I don't like the idea of adding bookmarks with Tor, but I accidentally created one by hitting the shortcut. For my knowledge and to prevent further mistakes like this one, where ...
3
votes
2answers
13k views

Security implications of running tails in Virtual machine

So I was suggested to use Tails on a VirtualBox software. But as I was going thru the documentation, I saw this security limitation "Both the host operating system and the virtualization software are ...
1
vote
1answer
436 views

How safe is Tor from drive-by malware?

How do ensure that one's exit node will not send one JS malware (like the forbes.com drive-by download attack?)
0
votes
1answer
172 views

Can a website read out my MAC address using JavaScript even though I use Tor?

If I use a Tor to visit a site with enabled JavaScript, can this website find out my MAC address, monitor serial number, the serial number of the processor etc?
1
vote
1answer
108 views

Add-on for saving in .mht file format

I'd like to save web pages in .mht file format using Tor Browser (https://addons.mozilla.org/en-US/firefox/addon/mozilla-archive-format/) But installing additional addons or plugins into the Tor ...
2
votes
1answer
263 views

ISP & LEO tracking on Tor

I realize this will sound like I am beating a dead horse; however, I've read many, many threads and comments on this topic and am not quiet satisfied. Maybe I'm being too specific and need a more ...
0
votes
1answer
532 views

Send emails to external addresses

I would want to send emails to external addresses from an external web site (for example contact@mywebsite.com or .org etc) from my mail2tor account, but I received the next e-mail: Subject:   ...
3
votes
2answers
868 views

Why does Tails use an insecure memory wiping process

When I shutdown Tails, various standard messages appear including the statement that if the system does not power-off, then it is likely that the memory wiping process has failed. More curiously, I ...
1
vote
1answer
48 views

Security Risk or Not? [closed]

Given the server foot-printing that MIT has recently discovered, and the fact that we know that they have been found to be in cahoots with at least one intelligence service (i.e. The FBI) Whats to say ...
0
votes
1answer
653 views

Since Tor runs “sandboxed” if there is an infection thru Tor can you just close the browser and kill the infection?

I have Sandboxie I use with my firefox when looking in dangerous areas of the regular web and wanted to know if i can use it with Tor? This lets me simply close the browser if there is an infection ...
1
vote
0answers
381 views

XSS errors with recent update

I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :(( One site I used to visit often was mail.com, where I ...
1
vote
1answer
661 views

Please review my connection log errors

I am using the current version of Tails. I more often than not get the warning icon at the bottom left of the connection window telling me that the log file has been copied to the clip board. I will ...
1
vote
2answers
327 views

Exit node security from Man-in-the-middle attacks

Apparently, any exit relay may steal some private data from HTTP requests (like auth data / cookies / credit card information), if the connection itself is not encrypted. Does HTTPS provide a ...
1
vote
3answers
1k views

How to easily verify certificates on .onion versions of clearnet sites?

According to various sources (like this question) DuckDuckGo has an onion site. However, I can't easily find any mention of it on their clearnet site (but I stumbled across a special search result ...
3
votes
2answers
90 views

How is CVE-2015-7547 impacting Tor/Tails/Tor Browser?

If this is critically impacting Tails, for example, why hasn't there been an immediate upgrade to apply the patch?
1
vote
2answers
49 views

Multiple download sites for verification

I want to download Tails and verify by comparing multiple downloads from different sites. Can anyone point me to a list of these sites please? If I go to tor project.org there is just one download ...
2
votes
2answers
197 views

Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?

(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.) I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
1
vote
1answer
2k views

Tor circuit display in Tor Browser - how can it?

If all the nodes in a Tor circuit aren't supposed to know about each other, how can the Tor Browser display the whole circuit? If it knows all the addresses in the chain, can't someone else pull that ...
8
votes
1answer
6k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
0
votes
1answer
446 views

Anonymity in China

I am planning a trip to China soon and would like to be pretty much invisible while on the internet. Does TOR keep me safe from the "Internet Watchers?" I am not planning any illegal or immoral ...
1
vote
1answer
80 views

TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?

I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS? Even if it is running on ...
6
votes
2answers
394 views

Can somebody force my Tor circuits to always start from his “guard node”, to access my traffic?

The first node after "my browser" is always the same. I am worried to see that even when asking for "new identity" or "new circuit", it restarts always by the same IP address in France. I have no ...
3
votes
1answer
130 views

TOR asking for donations?

I downloaded new TOR and got an ad on the top of the browser stating "Please support TOR DONATE" with a pic of Cory Doctorow on the top of the page. I never saw TOR advertise before. Is this the ...
3
votes
1answer
2k views

block tor2web, onion.city,cab, .link etc

How would i block tor2web and proxies like that from my tor hidden services? Like a nginx rule or something to make sure no one can access my tor hidden service through these services.
0
votes
0answers
622 views

Is there a limit in the number of connections?

When I use Tor as a socks5 proxy for my applications, is there a limit in the number of connections I can perform to other hidden services (addresses.onion)? I am developing an application to check ...
-1
votes
1answer
85 views

Mozilla now hosting Tor relay nodes

What is the deal with allowing Mozilla to host Tor relay nodes? They say their contribution will help to greatly expand and improve the Tor network, yet despite all the recent spin on the truth about ...
5
votes
2answers
4k views

Use Tor browser as non-root Linux

If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user? Basically have the browser run ...
1
vote
0answers
11k views

Why is video/mp4 and video/webm blocked by noscript in TBB?

Is it safe to disable the default blocking? Why was it added/turned on? Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling ...
3
votes
0answers
59 views

Cannot get SE login form with tor browser [closed]

I don't understand why some sites refuse to allow tor users to log in. I can see why some might resent anonymity, but you aren't anonymous after you log in. But my issue today is that I can't get a ...
0
votes
2answers
209 views

Can you run a VM under a tor network? [closed]

Can I setup on the VM host to redirect all my VM guest networking over Tor?
1
vote
1answer
174 views

Is there a way to check vulnerability of an exit node before choosing it?

Or does it even matter? I connected to almost a dozen paths and ran the "shields up" port probe at GRC.com All but three had most ports in stealth mode. (Most had SSH, HTTP, and HTTPS connections ...
1
vote
1answer
167 views

How do I ensure my email client (Thunderbird) is using Tor?

How do I direct my email client (Thunderbird) to use Tor when sending and receiving? Or am I not understanding this correctly?
1
vote
3answers
833 views

Is it good or bad idea to use tor always?

Am I less or more secure, if I use tor when I do not need anonimity? If a web site does not support https, and I need to download a program from there, is it better to use tor, or not? Is it good ...

1
3 4
5
6 7
9