All Questions

7
votes
2answers
4k views

What Tor-friendly hosting providers allow anonymous accounts?

There are at least three levels to "Tor-friendly": allow clients; allow non-exit relays; allow exit relays. In any case, the provider must accept SSH connections via Tor. By "anonymous accounts", I ...
10
votes
1answer
850 views

The ReachableAddresses version of FascistFirewall

Is the following the equivalent of using FascistFirewall 1? ReachableAddresses accept *:80 ReachableAddresses accept *:443 I ask this because it seems that FascistFirewall will someday be deprecated ...
14
votes
3answers
7k views

For how long does a circuit stay alive?

How long does it take for Tor to expire a circuit and pick a new one? Is there a way to control this expiration time?
10
votes
3answers
3k views

Getting Tor to randomly use various Country IP's per session

I would like to have Tor use a different IP address in Canada every time I start or restart the application. Is that possible? If so, how?
13
votes
1answer
851 views

What specifically causes an Exit to get a Bad Exit flag?

The consensus includes details of exits that are flagged as "Bad Exits". What are the specific conditions under which the Bad Exit flag is given to an exit?
9
votes
3answers
353 views

What can I do to reduce risk of malicious traffic leaving my exit relay besides setting the exit policy?

I am considering running an exit relay. Unfortunately this opens possibility of legal issues and traffic restrictions from my Internet Service Provider. See Abuse FAQ and Legal FAQ. There is a nice ...
2
votes
2answers
2k views

My ISP doesn't even allow OBFS3

My ISP locks me out of the Internet if it detects Tor, and the normal browser redirects to the "TOR DETECTED" page. I then got the pluggable transport and added some bridges that I got from BridgeDB. ...
19
votes
1answer
5k views

Is it possible to look up the public key for a .onion-address?

I know .onion addresses are a (partial) hash of a descriptor which contains a public RSA key, so I was wondering: it is possible to see the public key that is found when connecting to a .onion hidden ...
21
votes
6answers
36k views

How to run Tor on Raspbian on the Raspberry Pi?

The Debian/Ubuntu packages from deb.torproject.org[docs] do not work on the Raspberry Pi when running Raspbian: $ tor --version Illegal instruction Why, and how can I still run Tor versions ...
16
votes
1answer
219 views

Which exit node providers can I financially support to run nodes on my behalf?

This blog post from 2011 mentions a few organisations that accept donations to run Tor exit nodes. What all organisations are there that accept donations to run exit nodes on my behalf?
6
votes
3answers
29k views

OnionBrowser for iOS — how secure is it?

Currently it seems there are no torproject.org "officially sanctioned" solutions for iOS. However, there is a browser called OnionBrowser that passes check.torproject.org and is able to access hidden ...
8
votes
2answers
388 views

Why doesn't the Tor Browser Bundle include CAcert root cert?

CAcert is a community based approach to create a certificate authority. Many sites use it (i.e. CCC). However the root certificate is not yet present in major browsers and also not in the Tor Browser ...
12
votes
2answers
1k views

When I click “New Identity”, why do I sometimes end up with the same exit relay?

Three variants on the same question: If I click "new identity" in Tor Browser to get a new circuit, why does my new circuit sometimes have the same exit relay as the last circuit? Doesn't that hurt ...
7
votes
3answers
1k views

How can website fingerprinting be prevented?

Recent research [PDF] has shown that website fingerprinting works with Tor. Website fingerprinting = Determine what website is visited based on certain characteristics even when encryption is applied....
5
votes
1answer
82 views

Can ReachableAddresses be on separate lines?

Can ReachableAddresses be on separate lines? Like this: ReachableAddresses accept *:80 ReachableAddresses accept *:443 Or does it have to fit into one? Like this: ReachableAddresses accept *:443, ...
12
votes
2answers
4k views

How to use Hidden Service Authentication?

How can Hidden Service Authentication be used? I never saw documentation about that anywhere.
5
votes
3answers
10k views

How to use Tor behind a http-only proxy?

A proxy supports only http. No http"s". Connect method not supported. In other words, a client can only visit http port 80. Anything else is unsupported. Can Tor be used in such an environment? How? ...
8
votes
1answer
66k views

How can one make Tor faster, when willing to to sacrifice anonymity?

It's clear, with special configs of this kind, anonymity will suffer. But if one is aware of that and willing to accept that... How can one make Tor faster? How can one use only fast relays? Will ...
4
votes
2answers
677 views

How can Tor users and Tor Network protect themselves from an exit node that is actively logging or manipulating exit traffic?

Tor Exit nodes are the last hop in the circuit a Tor client establishes to reach a service in the Internet. Exit nodes handle the actual traffic of the client, either it's encrypted or not. That ...
9
votes
4answers
315 views

May I do security inspection on exit relays?

If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
13
votes
3answers
570 views

How do I know if my bridge is actually useful to the Tor network?

I set up a Tor bridge a couple of days ago, but it sees hardly any traffic. How can I check that I did everything right and my bridge is actually registered in the Tor network? And can I find out if ...
9
votes
1answer
259 views

Can you confirm that my IP address was a Tor relay a few months ago?

Let's assume I received a letter today that accuses me of downloading an illegal file, posting something inappropriate in a forum, or hacking into a system. And that happened a few months ago. But I ...
10
votes
4answers
565 views

Can I help Tor if I just have webspace?

I'm thinking about how I can help Tor and its users. However I don't own big servers and also don't want to run a relay from my home. The only thing I have up to now is some private website. Is there ...
15
votes
3answers
477 views

Does my anonymity depend on the number of Tor users around me?

In other words, if there are many Tor users in my part of the world, do I get better or worse anonymity out of Tor compared to someone using it in an area with few Tor users?
1
vote
1answer
68 views

How to determine if reported level of TLS overhead indicates a problem?

Tor periodically logs a diagnostic message with the percentage of TLS write overhead. How can one determine if the percentage reported is indicative of a problem with the associated tor relay?
6
votes
1answer
259 views

Is it possible to team multiple circuits in the current Tor network?

The client-selected paths that carry traffic through the Tor relay network are called circuits. Tor clients switch circuits at ten minute intervals for better anonymity. However, latency and bandwidth ...
2
votes
2answers
127 views

What impact does a public onion client have on my anonymity?

Sometimes I'm working in a small office. Colleagues asked me to try Tor and I thought about setting up SOCKSListenAddress thus allowing them to use my onion client. Can this harm my anonymity in any ...
6
votes
1answer
260 views

Why do some websites reset my session?

When I visit some web sites, there is some strange behaviour. First I can browse through the page without any problems. Then out of nowhere I land again on the main page. After this happened I can ...
8
votes
1answer
279 views

Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?

Assume someone wants to disrupt the Tor network or maybe bring it down. A powerful attacker could try to DDoS all the directory authorities. As there are only 10 worldwide this seems like an easy task....
29
votes
3answers
4k views

Why does check.torproject.org sometimes tell me I'm not using Tor, when I am?

There are a variety of (usually rare) situations where https://check.torproject.org/ will give you a false negative -- that is, it says "you're not using Tor" when you are. The FAQ does not explain ...
5
votes
1answer
2k views

Best way to view Tor logs and network stats using Tor via Homebrew?

I have installed Tor using Homebrew and configured torrc for client and bridge relay usage. However I would like to be able to see stats similar to what is available in Vidalia network monitor and log ...
12
votes
0answers
7k views

How can I use Tor from networks whose operators attempt to block Tor use? [duplicate]

How can I use Tor from networks whose operators attempt to block Tor use? For example, I previously used Tor from my school's network to avoid restriction of my Web browsing based on keywords, but ...
10
votes
1answer
334 views

Can I expect the Tor Browser Bundle not to leak information to the file system and to other applications?

Was the Tor Browser Bundle built with aim not to leak information to the file system (e.g. to temporary files), to the disk in general (e.g. to the swap) and by other means to other applications (e.g. ...
8
votes
1answer
182 views

Who can see my bridge's ContactInfo?

I'm guessing that a bridge uploads its ContactInfo to the bridge authority, so there's a point of contact for the Tor project. Is this information available to any other parties, i.e. users ...
1
vote
1answer
214 views

What events led to Freedom Hosting going down? [closed]

Freedom Hosting was one of the largest .onion website hosts until it suddenly started serving malicious code, and eventually went offline (presumably permanently). What was the sequence of events ...
4
votes
1answer
124 views

Which countries contribute the most to the Tor source code?

Amongst the developers working on the Tor source code, which countries have the maximum representation in terms of number of contributors and overall contributions?
14
votes
2answers
196 views

How would I effectively deploy a current version of Tor on an Ubuntu system?

With the packaging of Tor in Debian and Ubuntu set where neither will ship the latest version of Tor for users as it is in the Debian "experimental" repository, what alternative repositories are ...
7
votes
1answer
747 views

What is the “TLS write overhead” percentage reported in Tor log entries?

Tor sometimes logs entries similar to this: Sep 27 03:21:32.000 [notice] TLS write overhead: 13% What does this line mean? Is there a value where this indicates problems?
4
votes
2answers
3k views

What is OnionCat?

With Tor itself, it is only possible to do TCP due to SOCKS5 limitations. OnionCat allows you to do more than TCP through Tor; how does this work?
3
votes
2answers
157 views

What are the threat differences to accessing hidden services compared to the regular internet over Tor?

I understand many of the possible attacks against a user visiting a regular website over Tor but I am wondering, what are the potential attacks to identify a connection between a user and a hidden ...
10
votes
4answers
278 views

Where in the world does Tor provide the highest degree of anonymity?

As we know, Tor hides users amongst the other users on the network, so the more populous and diverse the user base for Tor is, the more everybody's anonymity will be protected. So, in which part of ...
2
votes
1answer
2k views

How does onion routing work? [duplicate]

How does onion routing work? How would it be explained to someone who has a basic understanding of networking?
9
votes
2answers
1k views

Should I choose a new guard if the network is overloaded?

When I start the Tor Browser Bundle I sometimes see the message: Your Guard … is failing more circuits than usual. Most likely this means the Tor network is overloaded. If this one guard node is ...
5
votes
1answer
3k views

Does the Tor Browser Bundle cache relay information?

When I restart the Tor Browser Bundle shortly after I've closed it I have the impression that relay information load faster. So I assume that the information about running relays is cached somehow. Is ...
13
votes
4answers
861 views

Are short-lived relays useful to the Tor network?

I have some dedicated servers which are not used at the moment. However this can change on a weekly basis. Would it be useful to the Tor network for me to configure them as relays during the times ...
26
votes
5answers
25k views

How can I anonymize my SSH traffic using the Tor network?

I have a working installation of Tor. I am able to both access hidden services and proxy my clear-net traffic through Tor. My main source of traffic so far has been HTTP. I would like to know how I ...
3
votes
1answer
63 views

Is there a list of applications which are know to leak or not to leak information when using with Tor?

Some applications can either leak sensitive information through the Tor channel or they can make communication outside of the Tor channel which could lead to identification of your computer in the Tor ...
21
votes
3answers
1k views

How to prevent the Mevade botnet from abusing the Tor network?

If the botnet admin decides to transmit data, maybe he alone could bring down the whole Tor network. The NTor circuit-level handshake in Tor 0.2.4 solved some problems, but the botnet is still ...
23
votes
3answers
8k views

How does a Tor client pick Tor nodes for circuit creation?

A Tor client initially contacts Directory Authorities to fetch the consensus (i.e. a file containing all relays of the Tor network at that time with details such as IP address, exit policy, public key ...
7
votes
4answers
408 views

How to detect tampering with Tor binaries downloaded from unofficial sources?

If I've download a Tor binary from an unofficial source is there a way to verify that the binaries haven't been tampered with?

15 30 50 per page