Questions tagged [vulnerability]
The vulnerability tag has no usage guidance.
20
questions
14
votes
3answers
1k views
Are there any vulnerabilities in the process of onion routing?
In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
7
votes
1answer
264 views
Tor historical vulnerabilities list
Is there a compiled list of all discovered and fixed Tor vulnerabilities from the time of its creation until now?
I am looking for something like this list for open-ssl
https://www.openssl.org/news/...
7
votes
3answers
2k views
How can website fingerprinting be prevented?
Recent research [PDF] has shown that website fingerprinting works with Tor.
Website fingerprinting = Determine what website is visited based on certain characteristics even when encryption is applied....
2
votes
1answer
321 views
Malicious hidden service directories [closed]
https://nakedsecurity.sophos.com/2016/09/07/can-you-trust-tors-hidden-service-directories/
if the descriptor ID is predictable, how easy is to muscle into the positions in the list just above a ...
2
votes
3answers
239 views
TAILS: “Probable” information leakage
From https://tails.boum.org/security/index.en.html :
Probable holes
Until an audit of the bundled network applications is done, information leakages at the protocol level should be considered as ...
2
votes
2answers
205 views
Equation: The Death Star of Malware Galaxy, How much does it compromise Tails?
Equation: The Death Star of Malware Galaxy https://securelist.com/blog/research/68750/equation-the-death-star-of-malware-galaxy/ reported to compromise the firmware of hard drive and reprogram the ...
2
votes
1answer
158 views
End-to-End Attack Collecting Information Using SIGINT: How Is It Done?
I'm reviewing the documents filtered by Snowden related to Tor. Two documents in particular, entitled "A potential technique to deanonymise users of the TOR network (proposal)" and "A potential ...
1
vote
1answer
6k views
Why is the “administrator” password not saved in Tails?
I can use any password to be administrator for each particular session [as long as I type it twice], at Tails boot.
That seems like a g a p i n g security hole if an adversary were to get/have access ...
1
vote
1answer
524 views
Orbot, Tor identities and changing network connectivity paths
I've been thinking about a potential vulnerability that in certain cases may make it possible to identify a Tor client.
Say a malicious entry node establishes a connection with an Orbot client. This ...
1
vote
2answers
130 views
How vulnerable would Tor users be if a single entity controlled a large number of nodes?
There 4626 relays online. What is stopping a single entity from adding, say, 9000 relays to the network around the world so they can occasionally watch bits of the network? If the cost of this is ...
1
vote
0answers
40 views
Who creates malicious Tor nodes, why, and how to they work?
I understand the concept of a malicious Tor node, but am confused on a few things.
Who makes malicious Tor nodes? I assume non-Tor friendly governments and non-government threat actors.
Why would ...
1
vote
0answers
78 views
Are there known vulnerabilities in JonDo's custom Tor client?
The JonDo client includes an option for accessing the Tor network. Given some of the features (excerpted below) it seems to use a custom Tor client. Are there known vulnerabilities?
JonDo has Tor ...
0
votes
2answers
1k views
Do vulnerabilities exist in Tor Browser Bundle
This site: http://www.hongkiat.com/blog/do-donts-tor-network/
claims that
Tor Browser Bundle should not be used to protect one’s online privacy and security. FBI’s recent takedown of Freedom ...
0
votes
1answer
216 views
How could Tor be cracked? [closed]
I've heard that government agencies et al. have not been able to crack Tor. Why have they been unable? What would one have to do to crack Tor? Are there any Tor "stress tests"?
0
votes
1answer
77 views
Effects of CVE-2017-9445?
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445
http://openwall.com/lists/oss-security/2017/06/27/8
https://www.ubuntu.com/usn/usn-3341-1/
What does this mean for tor browser users? How ...
0
votes
2answers
97 views
Is Tails affected by the GnuTLS Hello Vulnerability (CVE-2014-3466) ? If so, how?
There are reports that many Linux systems are compromised by a recent critical GnuTLS issue. Is Tails affected by this?
0
votes
0answers
55 views
Interesting fingerprinter found in the wild… possible vulnerability?
Was passed an interesting browser fingerprinter someone found in the wild and was curious how the Tor browser would respond to it. Not sure what the original site was that served it...
Script is at ...
0
votes
1answer
42 views
How to check for Spectre vulnerabilities and similar threats for my relay to be secure?
Setup
I'm running my new (2 days old) relay using:
my own dedicated server Dell T20 with hardware:
CPU: Intel Xeon E3-1225 v3 @ 3.20GHz (Haswell)
RAM: 32 GB DDR3 ECC
NET: overall maximum bandwidth ...
0
votes
1answer
344 views
How secure is Tor? Can Tor's traffic be monitored by an attacker?
In the first episode of the first season of Mr.Robot, Elliot is able to monitor Rohit's traffic even though he was using Tor and .onion sites. How did Elliot do that? Would it be possible to do that ...
0
votes
1answer
81 views
Old Tor users can affect my HS?
Lets say a user is using a Tor version from 2013 and decides to connect to my HS that has the latest Tor client. Since the user has an old version of Tor, can the vulns in the Tor version reveal my IP?...
