Questions tagged [traffic-analysis]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
20 views

Is it ok to run other services on an Exit relay?

The Tor documentation suggests not to host an exit relay on your home network (or at least if it's your only connection) because all your local traffic will be viewed as coming from Tor as well, and ...
0
votes
1answer
98 views

Tor deanonymization via ISPs

We known that an adversary can deanonymize a user (on clearnet) if it controls both the guard and the exit node. But is that neccesary? We know that the NSA gets huge amounts of data from the internet....
0
votes
0answers
14 views

Is there an estimate of how much overload data Tor Browser will require in comparison with a regular browser?

I surf the web in Tor with the monthly limited data plan of my mobile phone, whose connection I tether to my computer. Since it is limited, I wonder how much extra data I spend with Tor Browser that I ...
0
votes
1answer
44 views

IRC traffic while using tor

I sniffed the traffic using wireshark while using IRC via TOR, the traffic is encrypted of course cuz its done i in the application layer (i think, correct 4 me if i am wrong). now the traffic is ...
0
votes
1answer
78 views

Is websites/services hosted on tor network safe?

I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it. My question ...
0
votes
1answer
277 views

Why is my Tor bridge relay not getting any traffic?

I used to run a Tor bridge on Windows at home, where I have a 300/150 Mbps ISP. This Windows has memory leak and crashes after some hours, ad I believe that was making my bridge never get traffic. A ...
0
votes
1answer
114 views

How to monitor traffic usage on a Tor bridge on Linux?

I'll buy a small server and will install some Ubuntu distro on it, and among other things I'll install a Tor bridge that won't be an exit replay. I also will use it as a SOCKS proxy for a Firefox, I ...
3
votes
1answer
161 views

Does Tor still monitor “shadow” relays?

I've been researching methods to monitor hidden services for a university project. I came across this paper which talks about injecting relays as hidden service directories to gather onion addresses. ...
0
votes
1answer
332 views

How secure is Tor? Can Tor's traffic be monitored by an attacker?

In the first episode of the first season of Mr.Robot, Elliot is able to monitor Rohit's traffic even though he was using Tor and .onion sites. How did Elliot do that? Would it be possible to do that ...
0
votes
2answers
317 views

Does the Tor browser counter wiretapping?

I have learned about Tor quite recently. Where I live, new laws are made for digital surveillance. It looks like the law will gain new tools with the motivation to prevent terrorism. There is a lot of ...
0
votes
1answer
163 views

Simulating Correlation attacks on Tor using Shadow

Is it possible to simulate correlation attacks on Tor using Shadow? If it's possible what's the easiest way to implement it? If it's not possible, then is there any other simulators that can be used ...
2
votes
1answer
1k views

Net Neutrality Implications [closed]

If the "net neutrality" thing is stopped, will it affect Tor users? What about Onion services? I am not qualified to add more details on "net neutrality" so feel free to add to this post
1
vote
0answers
264 views

Clarification of Risks to Anonymity [closed]

My goal is to get a clear sense of what is required to maintain anonymity. In a sense I'm mapping the flow of traffic in my head and trying to understand how certain traffic might interact in ways ...
0
votes
1answer
133 views

Tracking users via google APIs?

if i open website1.com in one tab and it uses some google analytics or google fonts api, then open website2.org in another tab which also uses google products... do the google domains see different ...
0
votes
1answer
43 views

Alterations to Tor and finding a way to run tests and simulations [duplicate]

For one of my assignments I have to conduct a research paper. I decided to propose a solution vulnerabilities TOR has with traffic analysis. I'm suggesting adding in random delays,random hop count ...
0
votes
1answer
100 views

Suspcious IMAP traffic between my machine and a Tor entry node

I was running Wireshark and noticed that my machine sends IMAP requests to 37.187.22.131, which, according to my TorBrowser, is the entry node I'm connected to. Likewise, my machine seems to be ...
3
votes
1answer
387 views

How does de-anonymization work?

I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource ...
4
votes
3answers
4k views

Is the “Ron's Coffee” Tor-related hack technically possible in episode 1x01 of Mr. Robot?

In the episode 1x01 of Mr. Robot, Elliot confronts the owner of Ron's Coffee. He basically states that the man is hosting illegal (child pornography) content served in the form of a website that the ...
1
vote
1answer
2k views

Does Tor usage increase the traffic volume compared to other browsers?

Let's say I visit some page via Chrome with in/out packages at the level of 10MB. Could we know (theoretically) how the traffic volume will be affected if I visit the same site via Tor? Will Tor ...
2
votes
3answers
123 views

Can Tor run on messaging applications on my phone, and how?

I would like to know if Tor can cooperate with other applications, if the information leaks can be stopped and I can be anonymous. For instance on a messaging application, if someone were to try to ...
2
votes
1answer
83 views

traffic-analysis

I am (very) new to Tor. As I understand it, each time a data-package passes a Tor-relay, it is encrypted/decrypted, thereby changing in size only marginally. It seems to me that if somebody monitors ...
4
votes
3answers
630 views

Does caploader able to identify Tor traffic in the network?

I found this blog post which says that they were able to identify Tor traffic by using a software called caploader? Have any one tried this software? I wasn't able to try it by myself as the protocol ...
1
vote
0answers
65 views

Is traffic analysis easier for relay adversaries than for network adversaries?

I gather that relay adversaries employ traffic analysis to determine that two of their relays are part of the same circuit. And I vaguely recall a comment, perhaps on the Tor Project blog, that ...