Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [verification]

The tag has no usage guidance.

0
votes
1answer
58 views

Tor Browser, Signature verification Failed, Cant check signature: No public key

I'm trying to install Tor manually on Ubuntu 18.04 bionic beaver using this guide: https://linuxconfig.org/how-to-install-tor-browser-in-ubuntu-18-04-bionic-beaver-linux When I try to verify my ...
0
votes
1answer
66 views

Help with Tails signing key verification

Please help me verify the Tails signing key. Without having access to the web of trust, I'm trying to collect fingerprint data from multiple sources to be more certain that I've downloaded the ...
0
votes
1answer
748 views

Variable success in verifying Tails

Since the introduction of the new Tails signing key, which I think was towards the end of 2015, I have had variable success in verifying my download of the Tails ISO file. For example, to verify the ...
0
votes
1answer
1k views

Tor Browser won't load in Ubuntu 16.04

I am using Ubuntu 16.04. I have tried to download Tor Browser from the Tor website and using the Tor Browser package from the Ubuntu software application. Each time I get a message titled Signature ...
1
vote
2answers
958 views

Tails -> Verify the ISO image -> Using the command line: “gpg: Impossible de v'erifier la signature : No public key”

I follow this Tails docs: $ brew install gpg $ gpg --keyid-format 0xlong --verify tails-amd64-3.0.iso.sig tails-amd64-3.0.iso gpg: Signature faite le Sat Jun 10 17:37:05 2017 CEST gpg: ...
1
vote
1answer
323 views

Failed signature verification

I have followed the instructions for verifying the Tor exe on Windows using GnuPG and command prompt (here: https://www.torproject.org/docs/verifying-signatures.html.en) but haven't been able to get ...
2
votes
0answers
364 views

Tor installer download signature verification failure

I have downloaded Tor installer and .asc file, and when attempting to verify with Linux I run the command gpg --verify tor-browser-linux32-6.5.1_en-US.tar.xz.asc tor-browser-linux32-6.5.1_en-US.tar.xz ...
2
votes
1answer
147 views

How dangerous is it to run Tor without verifying the signature of the package?

I tried to follow the tutorial (https://www.torproject.org/docs/verifying-signatures.html.en) and also checked this forum looking for help (Tor Browser-how to verify signature?) but none of the things ...
2
votes
1answer
167 views

64bit Windows and Mac Tor Browser Bundle downloads always have the wrong sha256 hash. What is wrong?

I mostly run Ubuntu versions and never have problems verifying signatures and sha256sum on the Tor releases for Ubuntu. However, when I attempted to put tor on a windows7 machine, torbrowser-...
2
votes
2answers
112 views

Facebook mobile phone activation

Why does the hidden service of facebook (http://facebookcorewwwi.onion) ask for a mobile phone verification? Isn't the goal of TOR to be able to visit pages which are censored in some countries (e.g. ...
1
vote
1answer
2k views

Tails signing key verification

When I use the following command: gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F Instead of getting this: sig! 0x1202821CBE2CD9C1 2015-01-19 Tails developers (signing key) <...
2
votes
1answer
80 views

What is the safest way to keep TBB up to date?

In the past these questions were asked about updating Tor Browser Bundle: How can I switch from one Tor Browser Bundle version to another? How do I keep my Tor Browser Bundle current? For a while ...
2
votes
1answer
437 views

Tor Browser key problem

After I verified the key for the Tor Browser I got this error message (translated from Swedish): gpg: WARNING: This key is not certified with a reliable signature! gpg: There is nothing ...
1
vote
1answer
2k views

gpg4win and Tails signature problem [closed]

After I downloaded the Tails ISO I downloaded gpg4win. I did a quick virus scan of the gpg4win file and my Comodo antivirus said it was a "TrojWare.Win32.Kryptik.AGMN@284730160"! So I had to spend a ...
1
vote
1answer
425 views

Tails signature mismatch

So I downloaded the new signing key with Key-ID 0x58ACD84F. However, the detatched signature file for Tails 1.3.2 seems to be signed with Key-ID 0x752A3DB6 and I can't seem to find that particular key ...
2
votes
2answers
456 views

Getting bad signature for tor-browser-linux64-4.0.4_en-US.tar.xz [duplicate]

Hi I am getting a bad signature for the tor browser for 64 bit GNU/Linux. I have followed the instructions from the website completely which are : The next step is to use GnuPG to import the key ...
2
votes
1answer
781 views

Verifying .asc file for TorBrowser-linux64-4.0.4_en-US.tar.xz

I executed this part of the instructions from the Tor website: The next step is to use GnuPG to import the key that signed your package. The Tor Browser team signs the Tor Browsers. Import its key (...
1
vote
1answer
72 views

Certificate authorization spoofing

I am somewhat new to Tor and am now using it for everything. I have seen old posts recommending it not be used for online banking etc. From my experience with cryptography, this seems ludicrous ...
2
votes
0answers
86 views

Why isn't GPG adequate (is GnuPG better?) for Verifying Tor? [closed]

I'd so much rather use GPG because GnuPG will require me to go into and type in the Terminal application. The last time I did that I killed my computer: I made it have a "fatal" system error. One ...
3
votes
2answers
5k views

Tor Browser-how to verify signature?

Downloaded the file for Win7, also Gpg4Win. Mentioned .asc file did not accompany Tor, in spite of the description on the Torsite. Other ways of verification I could not find. Nevertheless I followed ...
3
votes
3answers
984 views

Why does GnuPG show the signature of Erinn Clark as not trusted?

Got the latest Tor Browser Bundle (3.5.2.1) and tried to verify. Here's the result: gpg --verify /Users/user/Downloads/TorBrowserBundle-3.5.2.1-osx32_en-US.zip.asc /Users/user/Downloads/...
2
votes
1answer
3k views

Not enough information to check signature validity of the signature for the browser bundle?

I have downloaded the most recent package of the Tor Browser Bundle and I am attempting to verify the signature using gpg. I have imported the key and downloaded the signature file, but when I attempt ...
4
votes
2answers
2k views

Why cannot I see any .asc file when i download the package?

I wish to verify the signatures of Tor, but when I download the package I only have the .exe file to extract, I don't see any .asc file. I was following the short user manual for verify the signatures,...
5
votes
2answers
246 views

Can I download other software via TBB safely?

I use the Tor Browser Bundle for software downloads because I can not use the internet for this without Tor. Windows and Linux software download sites often do not use HTTPS, so I run the risk of ...
5
votes
1answer
1k views

How to verify Tor Browser Bundle (TBB) 3.x?

Downloading sha256sums.txt downloading one or more signatures the archive itself Then verifying each signature one by one. Then creating the sha256 of the archive. Then looking into the sha256sums....
2
votes
0answers
224 views

Is the Tor Project's Roger Dingledine Satoshi Nakamoto, creator of Bitcoin? [closed]

Historically, Roger appears to have been interested in systems with at least a vague resemblance to Bitcoin: http://archives.seul.org//freehaven/dev/Nov-2001/msg00000.html While I haven't used ...
3
votes
1answer
63 views

Is there a list of applications which are know to leak or not to leak information when using with Tor?

Some applications can either leak sensitive information through the Tor channel or they can make communication outside of the Tor channel which could lead to identification of your computer in the Tor ...
7
votes
4answers
411 views

How to detect tampering with Tor binaries downloaded from unofficial sources?

If I've download a Tor binary from an unofficial source is there a way to verify that the binaries haven't been tampered with?