Questions tagged [verification]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
202 views

Google Recaptcha not working in TOR Browser

In our website we provide Google Recaptcha V2 for users during login process, and the user must clear the Recaptcha verification before they can login else the user cannot login to the website. This ...
0
votes
1answer
494 views

Tor Browser, Signature verification Failed, Cant check signature: No public key

I'm trying to install Tor manually on Ubuntu 18.04 bionic beaver using this guide: https://linuxconfig.org/how-to-install-tor-browser-in-ubuntu-18-04-bionic-beaver-linux When I try to verify my ...
0
votes
1answer
116 views

Help with Tails signing key verification

Please help me verify the Tails signing key. Without having access to the web of trust, I'm trying to collect fingerprint data from multiple sources to be more certain that I've downloaded the ...
1
vote
1answer
820 views

Variable success in verifying Tails

Since the introduction of the new Tails signing key, which I think was towards the end of 2015, I have had variable success in verifying my download of the Tails ISO file. For example, to verify the ...
0
votes
1answer
2k views

Tor Browser won't load in Ubuntu 16.04

I am using Ubuntu 16.04. I have tried to download Tor Browser from the Tor website and using the Tor Browser package from the Ubuntu software application. Each time I get a message titled Signature ...
1
vote
2answers
1k views

Tails -> Verify the ISO image -> Using the command line: “gpg: Impossible de v'erifier la signature : No public key”

I follow this Tails docs: $ brew install gpg $ gpg --keyid-format 0xlong --verify tails-amd64-3.0.iso.sig tails-amd64-3.0.iso gpg: Signature faite le Sat Jun 10 17:37:05 2017 CEST gpg: ...
2
votes
1answer
370 views

Failed signature verification

I have followed the instructions for verifying the Tor exe on Windows using GnuPG and command prompt (here: https://www.torproject.org/docs/verifying-signatures.html.en) but haven't been able to get ...
2
votes
0answers
406 views

Tor installer download signature verification failure

I have downloaded Tor installer and .asc file, and when attempting to verify with Linux I run the command gpg --verify tor-browser-linux32-6.5.1_en-US.tar.xz.asc tor-browser-linux32-6.5.1_en-US.tar.xz ...
2
votes
1answer
162 views

How dangerous is it to run Tor without verifying the signature of the package?

I tried to follow the tutorial (https://www.torproject.org/docs/verifying-signatures.html.en) and also checked this forum looking for help (Tor Browser-how to verify signature?) but none of the things ...
2
votes
1answer
179 views

64bit Windows and Mac Tor Browser Bundle downloads always have the wrong sha256 hash. What is wrong?

I mostly run Ubuntu versions and never have problems verifying signatures and sha256sum on the Tor releases for Ubuntu. However, when I attempted to put tor on a windows7 machine, torbrowser-...
2
votes
2answers
116 views

Facebook mobile phone activation

Why does the hidden service of facebook (http://facebookcorewwwi.onion) ask for a mobile phone verification? Isn't the goal of TOR to be able to visit pages which are censored in some countries (e.g. ...
1
vote
1answer
2k views

Tails signing key verification

When I use the following command: gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F Instead of getting this: sig! 0x1202821CBE2CD9C1 2015-01-19 Tails developers (signing key) <...
2
votes
1answer
85 views

What is the safest way to keep TBB up to date?

In the past these questions were asked about updating Tor Browser Bundle: How can I switch from one Tor Browser Bundle version to another? How do I keep my Tor Browser Bundle current? For a while ...
2
votes
1answer
474 views

Tor Browser key problem

After I verified the key for the Tor Browser I got this error message (translated from Swedish): gpg: WARNING: This key is not certified with a reliable signature! gpg: There is nothing ...
1
vote
1answer
3k views

gpg4win and Tails signature problem [closed]

After I downloaded the Tails ISO I downloaded gpg4win. I did a quick virus scan of the gpg4win file and my Comodo antivirus said it was a "TrojWare.Win32.Kryptik.AGMN@284730160"! So I had to spend a ...
1
vote
1answer
430 views

Tails signature mismatch

So I downloaded the new signing key with Key-ID 0x58ACD84F. However, the detatched signature file for Tails 1.3.2 seems to be signed with Key-ID 0x752A3DB6 and I can't seem to find that particular key ...
2
votes
2answers
486 views

Getting bad signature for tor-browser-linux64-4.0.4_en-US.tar.xz [duplicate]

Hi I am getting a bad signature for the tor browser for 64 bit GNU/Linux. I have followed the instructions from the website completely which are : The next step is to use GnuPG to import the key ...
2
votes
1answer
815 views

Verifying .asc file for TorBrowser-linux64-4.0.4_en-US.tar.xz

I executed this part of the instructions from the Tor website: The next step is to use GnuPG to import the key that signed your package. The Tor Browser team signs the Tor Browsers. Import its key (...
1
vote
1answer
75 views

Certificate authorization spoofing

I am somewhat new to Tor and am now using it for everything. I have seen old posts recommending it not be used for online banking etc. From my experience with cryptography, this seems ludicrous ...
2
votes
0answers
89 views

Why isn't GPG adequate (is GnuPG better?) for Verifying Tor? [closed]

I'd so much rather use GPG because GnuPG will require me to go into and type in the Terminal application. The last time I did that I killed my computer: I made it have a "fatal" system error. One ...
3
votes
2answers
5k views

Tor Browser-how to verify signature?

Downloaded the file for Win7, also Gpg4Win. Mentioned .asc file did not accompany Tor, in spite of the description on the Torsite. Other ways of verification I could not find. Nevertheless I followed ...
3
votes
3answers
990 views

Why does GnuPG show the signature of Erinn Clark as not trusted?

Got the latest Tor Browser Bundle (3.5.2.1) and tried to verify. Here's the result: gpg --verify /Users/user/Downloads/TorBrowserBundle-3.5.2.1-osx32_en-US.zip.asc /Users/user/Downloads/...
2
votes
1answer
3k views

Not enough information to check signature validity of the signature for the browser bundle?

I have downloaded the most recent package of the Tor Browser Bundle and I am attempting to verify the signature using gpg. I have imported the key and downloaded the signature file, but when I attempt ...
4
votes
2answers
2k views

Why cannot I see any .asc file when i download the package?

I wish to verify the signatures of Tor, but when I download the package I only have the .exe file to extract, I don't see any .asc file. I was following the short user manual for verify the signatures,...
5
votes
2answers
249 views

Can I download other software via TBB safely?

I use the Tor Browser Bundle for software downloads because I can not use the internet for this without Tor. Windows and Linux software download sites often do not use HTTPS, so I run the risk of ...
5
votes
1answer
1k views

How to verify Tor Browser Bundle (TBB) 3.x?

Downloading sha256sums.txt downloading one or more signatures the archive itself Then verifying each signature one by one. Then creating the sha256 of the archive. Then looking into the sha256sums....
2
votes
0answers
227 views

Is the Tor Project's Roger Dingledine Satoshi Nakamoto, creator of Bitcoin? [closed]

Historically, Roger appears to have been interested in systems with at least a vague resemblance to Bitcoin: http://archives.seul.org//freehaven/dev/Nov-2001/msg00000.html While I haven't used ...
3
votes
1answer
64 views

Is there a list of applications which are know to leak or not to leak information when using with Tor?

Some applications can either leak sensitive information through the Tor channel or they can make communication outside of the Tor channel which could lead to identification of your computer in the Tor ...
7
votes
4answers
415 views

How to detect tampering with Tor binaries downloaded from unofficial sources?

If I've download a Tor binary from an unofficial source is there a way to verify that the binaries haven't been tampered with?