All Questions

11
votes
3answers
2k views

Why shouldn't one run Firefox/Chrome/any browser behind a fully torified system?

One can fully torify a system using Qubes OS TorVM, Whonix or a custom transparent proxy. Everything gets torified, even Adobe Flash. Why should one use Tor Browser even though everything is already ...
3
votes
2answers
266 views

What is identity correlation?

Can you describe please, what identity correlation is referring to? Why should I care? How can it be prevented?
10
votes
2answers
642 views

What is browser fingerprinting? What is linkability?

What do people refer to when they talk about browser fingerprinting? What is the difference between browser fingerprinting and linkability? Why is it important? For what is it used?
5
votes
2answers
289 views

Tor use frequent entry nodes after each launch

After launching Tor I can see in my firewall logs there are always few IPs that i'm connecting to. Is this something normal? These are entry nodes right? But why always the same? Does Tor cache ...
5
votes
3answers
283 views

How can I set up the most useful Tor node?

I've heard of Torservers and Noisetor. I've considered donating to them, but I want to avoid consolidating the Tor network in those two organizations, so I'd like to operate my own Tor node. (I also ...
3
votes
2answers
2k views

What is the overall safest way to use Tor?

I have reason to believe that I my status or activities place me at particular risk. I would like to do everything that I can to keep safe while using Tor. I think that I should get a dedicated ...
6
votes
2answers
954 views

How can I get help with Tor?

I want to download and use Tor, but something isn't working. I don't want to describe my situation or my problem in public, using IRC or on Stack Exchange. Is there any way that I can get private help ...
11
votes
1answer
476 views

How should I verify Tor downloads?

When I go to https://www.torproject.org/download/download.html to download the Tor Browser for Windows, how can I be sure that the package I'm downloading is genuine, and hasn't been tampered with? ...
8
votes
3answers
4k views

Is it possible to install the VLC plugin in the Tor browser?

I know that you're not "supposed" to use plugins in Tor - Flash and Java are two of the stupidest things you could use while trying not to be discovered. But let's say you'd like to view a video file ...
6
votes
3answers
3k views

Where is the Tor API documentation?

I want to have a program I'm writing interact with the Internet exclusively through Tor. After perusing the Tor project's documentation it appears that they do not specify the API anywhere i.e. how a ...
13
votes
1answer
1k views

Chromium browser bundle

What is the current state of porting the TBB from Firefox to Chromium? Several years back the Tor Project blog mentioned work by the Chromium developers to implement the needed APIs; since then, ...
9
votes
1answer
89 views

Would relay with temporary keys live the same great as with constant keys?

I'm on Debian-like OS. Directory /var/lib/tor/keys/ contains secret_id_key and secret_onion_key RSA keys. Would my relay work the same with 5Mb/s of bandwidth if I remove these keys each reboot, ...
8
votes
2answers
493 views

Why do I get an avast notice on my host (!) machine when I run tails in a virtual machine?

About 30-50% of the times I run tails in a vm my avast pops up a notice on the host complaining about some problem with a certificate. The sites, however, do not seem to exist and the url looks more ...
3
votes
1answer
347 views

Would anoNet-style darknets of Tor hidden services be workable?

Reading user329's question about running a secure email network using SMTP over Tor, I was wondering how standard email transport could be implemented among hidden services. And then I remembered ...
3
votes
1answer
658 views

How many Tor-like networks are around?

I'm about an idea, onion routing. Are there a secret or governments or a half-secret projects with similar technology? For example, DARPA-BAA-10-69 is a project called "SAFER" (May 20, 2010). The ...
4
votes
1answer
472 views

I want to setup my own Tor implemintation, what should I take for?

I have download latest source. Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only? How much nodes should I setup around the world for small group of confederates?
4
votes
1answer
922 views

How to implement transparent proxy on OS X?

I run Tor on my MacBook Air, which has two interfaces: USB Ethernet Adapter and Wifi. I want to use my MacBook as transparent proxy so that it can share the Tor connection through Wifi for cell phones....
1
vote
1answer
146 views

Is this possible and if so would it be useful to cracking some hidden services? [closed]

I found this on StackOverflow and I found it interesting... If this is possible wouldn't this be so useful to the feds? It asks can you get the server ip address from a mysql database for a login ...
4
votes
1answer
195 views

Where along the path is encryption used?

This question is born out of two questions that I saw coming up. Is the connection between my computer and the Tor network encrypted? How does Tor encrypt my traffic before it sends it to the server?...
11
votes
1answer
491 views

Why does the number of open circuits fluctuate that much in my heartbeat logs?, new d

I have a new exit relay running on DSL. It's version 0.2.3.25 running on Windows. Most of the time, there's only a few connections, but every so often there's a lot more. They all appear and disappear ...
13
votes
1answer
3k views

Why does Tor use three hops, instead of two?

With onion-routing a relay in a circuit only knows its predecessor and its successor, while a "normal" proxy is just one hop, so that it knows who connects to it and where it has to connect to. ...
4
votes
1answer
403 views

Would Tor remain anonymous in a post-quantum future?

I'm writing a near-future sci-fi novel where general quantum computing has been developed and SSL has been replaced with a security protocol based on quantum key distribution (QKD). Tor would still be ...
4
votes
1answer
178 views

What does “[warn] Query '[scrubbed]' didn't have valid rend desc in cache. Failing.” mean?

I am transferring files over Tor and I am seeing the following message in my Tor log file. Can someone explain what it means? [warn] Query '[scrubbed]' didn't have valid rend desc in cache. Failing.
4
votes
1answer
149 views

Is TorBirdy also securing requests by Thunderbird to PGP keyservers?

I use Icedove/Thunderbird on Debian together with TorBirdy. And it works very well. Now I created a new keypair and uploaded it to a keyserver and asked myself if TorBirdy is taking care of this ...
7
votes
4answers
255 views

How can find my Amazon EC2 Bridge with Globe

I installed a cloud bridge on Amazon EC2. Now I wanted to find it using Globe (http://globe.rndm.de/). But what name do I search for? I didn't choose one.
4
votes
1answer
89 views

How to protect against DoS but not harm Tor users

Often when websites want to protect themselves against Denial-of-Service attacks, they will limit the number of requests one IP address can make in a given span of time. Sometimes this practice ...
2
votes
2answers
4k views

How to virtual box tails in a tails environment?

How to virtual box tails in a tails environment? I'm Noob, need the step by step. I see there's several ideas but no step by step guide for the current/future distros. Please walk me through how to ...
3
votes
1answer
289 views

Why is the amount of incoming/outgoing traffic different on a non-exit relay?

I noticed something when letting a relay (non exit) run for a few days: The amount of traffic sent is larger than the amount received. This is confirmed by looking at the tor log and also by looking ...
3
votes
3answers
310 views

How are the exit and non-exit packets in the Tor relay system recognized?

Relay setting in Vidalia has two options for relaying: "for the Tor network" and "inside the Tor network". The options enable relaying either just inside the Tor network or additionally out of the Tor ...
9
votes
4answers
2k views

Is it possible to run a secure email network using SMTP over Tor?

I have thought about some of the security issues inherent in email. For example that even if the body is encrypted the headers are plain text so metadata is available. I was wondering if this could ...
1
vote
1answer
283 views

How can I change from a private to a obfsproxy bridge on Amazon AWS?

I set up an AWS server as a private bridge, but actually wanted to have a obfsproxy bridge. Is it possible to change it later, or should I delete the old server and set up a new one?
1
vote
1answer
651 views

Accessing my Amazon AWS Tor Bridge

I just set up a Tor Bridge on a Amazon AWS Server (very good explanation how to do that on https://cloud.torproject.org/). Now its up and running and I try to access it. I copied the private key (tor-...
4
votes
1answer
2k views

Tor hidden service on Raspberry Pi

I want to set up a Tor hidden service on a Raspberry Pi. What is a good way to do that? Maybe start with Occidentalis v0.2 by Adafruit? Is there a special tutorial for the Raspberry PI?
2
votes
2answers
293 views

Are low bandwidth DoS attacks performed over the Tor network a problem to be considered?

For low bandwidth and slow DoS / DDoS attacks (for example Slowloris, SlowLoris and PyLoris) the Tor network seems to be very useful medium. For free it offers two important things to the attacker: ...
10
votes
1answer
1k views

Why is Tor written in C?

Why is Tor implemented in the C programming language? Was that decision a matter of luck or taste of Tor's inventors? Are there any advantages of implementing this kind of technology in C?
5
votes
2answers
1k views

Is it posible to choose what entry node you want to use?

If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
15
votes
3answers
1k views

Register .onion as gTLD?

For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN: On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
12
votes
2answers
10k views

Secure my connection with VPN router & Tor

I just decided to buy a new router that support the OpenVPN protocols called "Linksys E4200". It is a very very good router. I read about Tor Over VPN & VPN over Tor. So my first question is: ...
4
votes
1answer
362 views

Can I run an exit relay through a VPN service?

Is it possible to run an exit relay through a VPN service? As long as the service provider has approved this, is it otherwise workable? Do any technical limitations or performance disadvantages make ...
6
votes
1answer
425 views

How are Hidden Service Locations Protected From Exit Nodes?

What is to prevent exit nodes from seeing the location of servers hosting Tor hidden services?
8
votes
1answer
2k views

What is the difference between NTor and TAP?

Recently I read that Tor switched from TAP handshake requests to NTor handshake requests. This seems to improve the performance and doesn't put such a high load on relays (because of Mevade). However ...
4
votes
1answer
134 views

Randomized testing of Tor options

When looking at the Tor manpage one sees lots of different options. They range from general options to some which are specific to relays, hidden services etc. I'm asking myself if each of those ...
5
votes
1answer
556 views

How does misconfigured time affect Tor?

Tor users and Tor relays across the world have different time zones. How does misconfigured time affects Tor operation either on client or server side? Is there a time skew margin in which Tor still ...
9
votes
2answers
580 views

How does the pluggable transport version of TBB affect browsing?

Does using the pluggable transport Tor Browser Bundle with an Obfs3 bridge affect browsing speed in a noticeable way? I am interested in using an Obfusproxy to hide my Tor usage form my ISP but I ...
13
votes
3answers
5k views

Is running Tor over Tor dangerous?

I've read somewhere that running Tor over another Tor connection is not only non-productive but actually dangerous? For example: say I were running TBB on my machine and was running Whonix in 2 VMs ...
26
votes
2answers
10k views

What are good explanations for relay flags?

We received an Atlas patch that adds tooltips to relay flags, so that relay operators can better understand what these flags mean. The patch author used dir-spec.txt as their guide. I wonder if ...
5
votes
3answers
932 views

Tor fingerprinting on NSA Egotisticalgiraffe document

On page 11 and 12 of this document: http://www.theguardian.com/world/interactive/2013/oct/04/egotistical-giraffe-nsa-tor-document they say it's easy to dinstinguish Tor users from non-Tor users ...
4
votes
2answers
131 views

How can volunteers join the RT team?

I heard that Tor has a tracking system where all requests for help land. Assume that someone has some time over the day and want to help to answer those requests. What specific knowledge does one need ...
11
votes
3answers
801 views

How to programmatically detect a hidden service

Is there some magical way which I can programmatically detect whether a hidden service exists, is up, or is dead, other than trying to connect to it through the Tor socks protocol? I can connect ...
9
votes
2answers
4k views

How reliable is setting an exit via country code?

In torrc, you can select exit nodes by country code (https://www.torproject.org/docs/faq.html.en#ChooseEntryExit) - how reliable is that selection? Could a malicious (or simply poorly-configured) ...

15 30 50 per page