Questions tagged [security]

Information about network security

Filter by
Sorted by
Tagged with
0 votes
1 answer
178 views

Can't launch hardend browser with Grsecurity

Can somebody explain to me, what's up with tor-browser-hardened and Grsecurity? I can't launch hardened browser on Grsecurity hardened kernel. Even after applying paxctl -cpemrxs to Browser/firefox ...
user avatar
2 votes
1 answer
148 views

How to verify that my ISP is not running a fake tor subnetwork

It seems very easy for my ISP to firewall all tor nodes and redirect all connection to a fake tor node or network of fake tor nodes. How can I make sure it is not the case?
user avatar
0 votes
2 answers
824 views

Routing Bittorrent through a Tor relay...

I am running a non-exit Tor relay on my Windows 10 machine. I have the ORPort as 443, while the SocksPort and ControlPort are 9050 and 9051, respectively. I devote 800 Kbps average, and 950 Kbps to ...
user avatar
1 vote
1 answer
664 views

Getting XML parsing error in tor. Is my tor compromised?

while browsing a website using tor i got the error as shown in image. I was shocked because error shows my name and path in my system. Is the above error something to be worried about or is it ...
user avatar
0 votes
1 answer
128 views

Addon/plugin "Unplug", is it safe? [duplicate]

I tried the add-on named "Unplug", it works fine. But is it safe to use the "Unplug" add-on within Tor to catch streaming ? Thanks.
user avatar
  • 1
0 votes
2 answers
2k views

Can this anonymous email be traced back to me?

I used TOR browser and guerillamail to send an email anonymously (or so I think). Is there any way this can come back to me? I used my own laptop on my home wifi network. I just opened Tor, did some ...
user avatar
1 vote
1 answer
131 views

Root access in Tor 6,0.5?

25/9/2016 Bonjour tout le monde, While launching Tor 6,05 as standard user, I check the connexions and noticed these lines : tcp 0 0 localhost:58186 localhost:ipp ...
user avatar
0 votes
1 answer
52 views

More information on how Tor works [closed]

How do I know Tor is working on my device? Is there any way I can know that my whatsapp is routed via Tor?
user avatar
0 votes
1 answer
139 views

Anonymity considerations of HTTP referer field [duplicate]

I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I ...
user avatar
2 votes
1 answer
1k views

Is it safe to use Tor with Malwarebytes Anti-Exploit?

I have Malwarebytes Anti-Exploit on my system. Is it safe to use it with Tor?
user avatar
  • 45
1 vote
1 answer
225 views

Additional Tor security at the client's network perimeter

I have been studying Tor and its related security issues recently, and have some questions. Aren't the most effective recent attacks on Tor, actually attacks on the browser (or plugins), rather than ...
user avatar
  • 13
3 votes
1 answer
3k views

How to sandbox/harden tor browser bundle?

A few months ago the user Canonizing Ironize suggested: Run tor-browser-bundle with another user Create a new network namespace so the process only sees the local loopback device, create a read-...
user avatar
0 votes
1 answer
34 views

firefox can be fingerprinted [closed]

https://www.browserleaks.com/firefox it can be used for both fingerprinting (different users use different OS setups or different Tor versions) and exploiting software vulnerabilities because when ...
user avatar
3 votes
1 answer
541 views

SSL, Mixed Content

https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content Mixed active content is content that has access to all or parts of the Document Object Model of the HTTPS page. This type of ...
user avatar
1 vote
1 answer
106 views

Is there a way to upload information to server using Tor and regular google search will find it? [closed]

Is there a way to upload information to server so there won't be a way to detect its real IP such as by using TOR. In addition, the content of it will be shown in regular browser google search? Is ...
user avatar
  • 113
1 vote
0 answers
76 views

security checks in tor browser in the form of a capture [duplicate]

How to bypass security checks in tor browser because whenever i enter a site in the address bar of tor browser a security check appears in the form of a capture? So how can i bypass security checks in ...
user avatar
  • 11
1 vote
1 answer
748 views

How to close tails firewall port?

I need to closing two or more open firewall ports in tails. How can I send the command to do this?
user avatar
  • 11
1 vote
1 answer
343 views

Why does my TOR exit node say "Unknown country"?

I read one other post similar to my question, but it does not tell me if it is SAFE to use an exit node that comes from an "Unknown country". Is it safe???
user avatar
  • 361
0 votes
1 answer
3k views

Remove bookmarks from tor browser

I use tor browser and have some bookmarks. Now I want to remove those bookmarks completely. I already tried approach mentioned on this link. I deleted places.sqlite file but all my bookmarks are still ...
user avatar
  • 101
2 votes
2 answers
130 views

Serious TCP Bug in Linux Systems?

https://threatpost.com/serious-tcp-bug-in-linux-systems-allows-traffic-hijacking/119804/ http://fossbytes.com/linux-distribution-hackable-serious-tcp-bug-report/ I am not clear on how this TCP news ...
user avatar
14 votes
1 answer
70k views

How to properly start tor service

For months I've been using: $ sudo systemctl start tor.service but I just realized we can start tor by simply typing "tor" into a terminal. What's the proper/safest way to start and stop tor.service?...
user avatar
  • 141
1 vote
1 answer
635 views

Tails firewall rules with static IP configuration

Tails firewall rules with static IP configuration Please note that this question is in relation to the connection it self. The unencrypted part of the connection not the part of the connection that ...
user avatar
  • 21
0 votes
2 answers
507 views

Can I permenantly remove package from Tails?

I just deployed tails on a flash drive, and were busy tweaking it. Is it possible to persistently remove some stock software packages from my copy of tails? I tried to apt-get remove them, but they ...
user avatar
  • 103
3 votes
2 answers
562 views

Security of Tor bridges and Captcha

Tor's current CAPTCHA implementation is easily crackable through bots - whether through paid human labour or automatic algorithms with 99.8% accuracy[1]. Although the algorithm by Google is for ...
user avatar
1 vote
1 answer
664 views

How can I bridge Wlan to Ethernet through tor?

Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network? By the way I want to use Linux for doing that. So please don't send me Windows ...
user avatar
1 vote
1 answer
1k views

Does tails have a penetrable firewall?

Does tails have a penetrable firewall? Currently tails firewall has a very complicated structure to it. It is difficult to say if the firewall is penetrable or not. One might think it is not when it ...
user avatar
  • 21
1 vote
1 answer
118 views

Could Someone attack tails firmware through tails?

Could Someone attack tails firmware through tails? I have noticed that some applications on OS does not require administrative privilege. Such is the browser add-on such as the one that can be used ...
user avatar
  • 133
1 vote
1 answer
1k views

Using Orbot to mask network traffic

I have a problem with my ISP. I recently changed to a new 'chat-only' provider, which allows only chat applications (i.e. whatsapp, messenger) to be used on his network. Is there any way to use ...
user avatar
  • 11
1 vote
0 answers
50 views

Using VPN to hide TOR [duplicate]

I've read discussions where some people advocate starting VPN first, then TOR and other recommend start TOR, then run the VPN. Whichever way I connect, if I go to whoer.net or stilllistener.com to ...
user avatar
  • 11
0 votes
1 answer
105 views

Suspcious IMAP traffic between my machine and a Tor entry node

I was running Wireshark and noticed that my machine sends IMAP requests to 37.187.22.131, which, according to my TorBrowser, is the entry node I'm connected to. Likewise, my machine seems to be ...
user avatar
2 votes
2 answers
9k views

Connection is not secure randomly occurring? [closed]

Here's a couple images of what I'm concerned about. It's directly to the left of the box where you type the website in it looks like an "i" in a circle. http://imgur.com/a/1ACrW
user avatar
0 votes
2 answers
301 views

Weird Message in Orbot logs?

I see something like the following line in log: WARN: Recived 404 Status Code "Not Found" from server [IP:Port] while fetching "/tor/keys/fp/[hash refrence here]" Two very intresting things come ...
user avatar
2 votes
1 answer
1k views

Could someone hack a tails device based on the firmware in it?

Could someone hack a tails device based on the firmware in it? I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a ...
user avatar
  • 133
1 vote
1 answer
201 views

Does tails work with Mini free Laptops

Does tails work well with mini free laptops. Are there any issues? Such as in proper shutdown. Can you boot Tails from DVD on mini free? Can you boot Tails from USB on mini free? Answer this ...
user avatar
  • 133
1 vote
1 answer
681 views

Virus Total Online Scanner Says Tor Has a Trojan

I tested Tor Browser with the Virus Total Online Scanner Website and got the message: This is the Trojan by Rising - Trojan.DisguisedAsDocument/Heur!1.A502-8a37qDgkMnL (Cloud) Is this correct, ...
user avatar
  • 11
0 votes
1 answer
887 views

Open ports in Tor Browser vs other browsers

I checked for open ports using GRC Shields Up website, obtaining a perfect stealth score on the following platforms and browsers (latest version of each one up to 06/06/2016): Windows 7: IE, Chrome, ...
user avatar
  • 1
1 vote
1 answer
89 views

TOR Anonymity Query [closed]

It is my understanding that TOR was actually created by the CIA, either directly or through some non-governmental entity. I get this information from a reliable source that has a background with the ...
user avatar
1 vote
1 answer
3k views

Is loading wl driver for macbook wifi at start up safe on Tails OS?

I managed to install wl driver on Tails OS and wanted to make it load at boot automatically. To achieve that, I configured the persistent volume to save APT PACKAGES and APT LISTS. Then I edited the ...
user avatar
  • 113
1 vote
1 answer
244 views

setup done on my windows vps for my .onion website [closed]

hi i was wondering what best security settings you guys could share and how do i setup for my webserver. running window 2008 r2. i do not want any leaking if possible. i understand windows vps is not ...
user avatar
13 votes
2 answers
302 views

Does Tor latency leak location information?

This might be a general question about any anonymizing service, but I'm new here and curious about, but not super familiar with, Tor. Suppose there's a service that engages in some handshake with ...
user avatar
  • 233
6 votes
2 answers
901 views

What would happen when multiple servers are having the same onion hostname?

I'm concern about uniqueness of the onion sites in terms of finding the right onion hostname and publishing it. How I can be guaranteed that my onion site will be the only one in Tor network with the ...
user avatar
  • 1,115
1 vote
2 answers
157 views

Adding a blacklist for known scam sites?

It seems that the issue of fake/spoofed onion sites is becoming more and more of a problem. The situation is such that on some more popular sites an incorrect keystroke may expose the user to ...
user avatar
0 votes
1 answer
3k views

Anonymity on TOR : DisconnectMe versus DuckDuckGo

IMPORTANT QUESTION ABOUT SECURITY - Anonymity on TOR : DisconnectMe versus DuckDuckGo As far as I know DuckDuckGo doesn't keep yoour data but it doesn't mean you are invisible on Internet when you ...
user avatar
  • 21
2 votes
0 answers
98 views

Tor Browser issue with DuckDuckGo [duplicate]

I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option. I don't know how to remove that to stay on my "...
user avatar
  • 21
7 votes
2 answers
938 views

Why do Tor hidden service operators bother with SSL/TLS encryption?

Tor hidden services have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal ...
user avatar
  • 419
1 vote
1 answer
196 views

What are the differences between security levels?

Tor browser has different security levels. What are these and what are the main differences between them?
user avatar
  • 1,115
1 vote
1 answer
18 views

Why the set_gid bit in /var/log/tor/?

On debian-based systems, the tor logging directory has the permissions $ ls -ald /var/log/tor/ drwxr-s--- ... /var/log/tor/ Why is this so? Is this a security vulnerability?
user avatar
  • 387
0 votes
2 answers
150 views

Latest scandals about Tor

I have stumbled upon certain articles that state that imply that Tor no longer safe. For example, This article and this and even this post by Mozilla imply that there is some backdoor known by the ...
user avatar
  • 320
0 votes
2 answers
558 views

Possibility with malicious endnode, SSL Strip?

I am wondering about the security with TOR, if an end node setup a proxy like Burp Suite and replaced the certificate, does it mean the end node can still see all the packets that had passed through ...
user avatar
  • 111
0 votes
1 answer
1k views

Is a server's response to a Tor browser query encrypted by the Tor nodes when it transits the Tor circuit in the reverse direction?

If a Tor browser makes a request of a server on the Internet, it will be encrypted several times by the Tor browser before it leaves the client. The destination server, however, will receive only the ...
user avatar

1
3 4
5
6 7
10