All Questions

1
vote
1answer
71 views

How to determine if reported level of TLS overhead indicates a problem?

Tor periodically logs a diagnostic message with the percentage of TLS write overhead. How can one determine if the percentage reported is indicative of a problem with the associated tor relay?
6
votes
1answer
271 views

Is it possible to team multiple circuits in the current Tor network?

The client-selected paths that carry traffic through the Tor relay network are called circuits. Tor clients switch circuits at ten minute intervals for better anonymity. However, latency and bandwidth ...
2
votes
2answers
127 views

What impact does a public onion client have on my anonymity?

Sometimes I'm working in a small office. Colleagues asked me to try Tor and I thought about setting up SOCKSListenAddress thus allowing them to use my onion client. Can this harm my anonymity in any ...
6
votes
1answer
261 views

Why do some websites reset my session?

When I visit some web sites, there is some strange behaviour. First I can browse through the page without any problems. Then out of nowhere I land again on the main page. After this happened I can ...
8
votes
1answer
291 views

Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?

Assume someone wants to disrupt the Tor network or maybe bring it down. A powerful attacker could try to DDoS all the directory authorities. As there are only 10 worldwide this seems like an easy task....
29
votes
3answers
5k views

Why does check.torproject.org sometimes tell me I'm not using Tor, when I am?

There are a variety of (usually rare) situations where https://check.torproject.org/ will give you a false negative -- that is, it says "you're not using Tor" when you are. The FAQ does not explain ...
5
votes
1answer
2k views

Best way to view Tor logs and network stats using Tor via Homebrew?

I have installed Tor using Homebrew and configured torrc for client and bridge relay usage. However I would like to be able to see stats similar to what is available in Vidalia network monitor and log ...
12
votes
0answers
7k views

How can I use Tor from networks whose operators attempt to block Tor use? [duplicate]

How can I use Tor from networks whose operators attempt to block Tor use? For example, I previously used Tor from my school's network to avoid restriction of my Web browsing based on keywords, but ...
10
votes
1answer
353 views

Can I expect the Tor Browser Bundle not to leak information to the file system and to other applications?

Was the Tor Browser Bundle built with aim not to leak information to the file system (e.g. to temporary files), to the disk in general (e.g. to the swap) and by other means to other applications (e.g. ...
8
votes
1answer
196 views

Who can see my bridge's ContactInfo?

I'm guessing that a bridge uploads its ContactInfo to the bridge authority, so there's a point of contact for the Tor project. Is this information available to any other parties, i.e. users ...
1
vote
1answer
219 views

What events led to Freedom Hosting going down? [closed]

Freedom Hosting was one of the largest .onion website hosts until it suddenly started serving malicious code, and eventually went offline (presumably permanently). What was the sequence of events ...
4
votes
1answer
133 views

Which countries contribute the most to the Tor source code?

Amongst the developers working on the Tor source code, which countries have the maximum representation in terms of number of contributors and overall contributions?
14
votes
2answers
200 views

How would I effectively deploy a current version of Tor on an Ubuntu system?

With the packaging of Tor in Debian and Ubuntu set where neither will ship the latest version of Tor for users as it is in the Debian "experimental" repository, what alternative repositories are ...
7
votes
1answer
781 views

What is the “TLS write overhead” percentage reported in Tor log entries?

Tor sometimes logs entries similar to this: Sep 27 03:21:32.000 [notice] TLS write overhead: 13% What does this line mean? Is there a value where this indicates problems?
4
votes
2answers
3k views

What is OnionCat?

With Tor itself, it is only possible to do TCP due to SOCKS5 limitations. OnionCat allows you to do more than TCP through Tor; how does this work?
3
votes
2answers
178 views

What are the threat differences to accessing hidden services compared to the regular internet over Tor?

I understand many of the possible attacks against a user visiting a regular website over Tor but I am wondering, what are the potential attacks to identify a connection between a user and a hidden ...
10
votes
4answers
303 views

Where in the world does Tor provide the highest degree of anonymity?

As we know, Tor hides users amongst the other users on the network, so the more populous and diverse the user base for Tor is, the more everybody's anonymity will be protected. So, in which part of ...
2
votes
1answer
2k views

How does onion routing work? [duplicate]

How does onion routing work? How would it be explained to someone who has a basic understanding of networking?
9
votes
2answers
2k views

Should I choose a new guard if the network is overloaded?

When I start the Tor Browser Bundle I sometimes see the message: Your Guard … is failing more circuits than usual. Most likely this means the Tor network is overloaded. If this one guard node is ...
5
votes
1answer
4k views

Does the Tor Browser Bundle cache relay information?

When I restart the Tor Browser Bundle shortly after I've closed it I have the impression that relay information load faster. So I assume that the information about running relays is cached somehow. Is ...
13
votes
4answers
900 views

Are short-lived relays useful to the Tor network?

I have some dedicated servers which are not used at the moment. However this can change on a weekly basis. Would it be useful to the Tor network for me to configure them as relays during the times ...
28
votes
5answers
28k views

How can I anonymize my SSH traffic using the Tor network?

I have a working installation of Tor. I am able to both access hidden services and proxy my clear-net traffic through Tor. My main source of traffic so far has been HTTP. I would like to know how I ...
3
votes
1answer
64 views

Is there a list of applications which are know to leak or not to leak information when using with Tor?

Some applications can either leak sensitive information through the Tor channel or they can make communication outside of the Tor channel which could lead to identification of your computer in the Tor ...
21
votes
3answers
1k views

How to prevent the Mevade botnet from abusing the Tor network?

If the botnet admin decides to transmit data, maybe he alone could bring down the whole Tor network. The NTor circuit-level handshake in Tor 0.2.4 solved some problems, but the botnet is still ...
23
votes
3answers
9k views

How does a Tor client pick Tor nodes for circuit creation?

A Tor client initially contacts Directory Authorities to fetch the consensus (i.e. a file containing all relays of the Tor network at that time with details such as IP address, exit policy, public key ...
7
votes
4answers
412 views

How to detect tampering with Tor binaries downloaded from unofficial sources?

If I've download a Tor binary from an unofficial source is there a way to verify that the binaries haven't been tampered with?
15
votes
2answers
1k views

Does Tor insert random delays or perform packet re-ordering to make the discovery of the communication path harder?

If an attacker can observe the Tor user, and the website being visited, it is possible to correlate the traffic by looking at time and size distributions of the communication. Techniques such as ...
16
votes
4answers
9k views

Is it possible to make the Tor onion-routing path longer?

By default, Tor uses an onion-routing path with three hops: entry, relay (middle) and exit. Is it possible to configure (or, if necessary, recompile) Tor to use more than three hops? This would lessen ...
13
votes
2answers
464 views

Are there trustworthy third-party audits of the Tor source code?

Was the Tor source code trustworthily audited by a third party to check if it does not contain a back-door? Are such audit results freely available?
18
votes
7answers
25k views

Can Tor be used with applications other than Web browsers?

From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc? (Please explain ...
26
votes
4answers
39k views

Should I run Tor in a VM?

I've heard advice that to further protect my anonymity/privacy it's best to run Tor (the Tor Browser Bundle) in a Virtual Machine, which you would ideally roll back after each use. What extra ...
13
votes
3answers
753 views

Are there any vulnerabilities in the process of onion routing?

In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
22
votes
2answers
905 views

How can I prevent my different activities carried out over Tor being linked?

I know there are potential risks of carrying out multiple activities over Tor at the same time, when I don't want them to be linked. For example, I might browse one website giving one pseudonym, then ...
16
votes
3answers
10k views

Can I detect when someone is connecting to my server via Tor?

I run a web server. Can I distinguish between traffic that has been routed via Tor and that which hasn't?
15
votes
2answers
1k views

Is Tor's security compromised if other services are connecting in the clear?

I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
15
votes
3answers
2k views

Can government agencies track what sites I'm visiting when using Tor?

Can agencies such as the NSA or GCHQ track what websites I'm visiting if I'm using the Tor Browser Bundle? What about hidden services?
8
votes
2answers
5k views

How do I create a launcher / script that opens an URL in TorBrowser (from the bundle)

If I do tor-browser_en-US/App/Firefox/firefox-bin http://example.com it opens in my regular Firefox browser. Is there a way to make a launcher/script that opens a link in the Tor Browser?
25
votes
3answers
14k views

My ISP/Network/Government has blocked access to the TorProject website. How can I download Tor?

I'm trying to download Tor but my ISP/Network administrator/Government has blocked access to the TorProject website. How do I download Tor?
17
votes
2answers
7k views

How can I install Tor from the source code in the Git repository?

It is sometimes desirable to compile Tor from source, and perhaps run an unreleased version (e.g., to test the latest changes, use new features unavailable in the latest release, etc.). What is the ...
1
vote
2answers
146 views

How does Tor pass my traffic around and should I be worried about malicious relay operators? [closed]

I am not sure how does Tor work, how safe is it as I heard that some relays are ran by bad people or government agencies.
2
votes
0answers
136 views

How do torrent clients over Tor affect the network? [duplicate]

This blog post from a few years ago, suggests that: The first answer is "don't run Bittorrent over Tor". We've been saying for years not to run Bittorrent over Tor, because the Tor network can't ...
46
votes
7answers
110k views

How can BitTorrent traffic be anonymized with Tor?

This blog post from a few years ago suggests that using BitTorrent services over Tor is a bad idea for multiple reasons. However, it also suggests some fixes to get over these problems. Is using a ...
14
votes
1answer
911 views

Is it safe to run an entry node server?

After some research, I found that there are mostly relay (middle) nodes, and less exit and entry nodes. But why? The connection from the client to the entry node is encrypted, so there should be no ...
23
votes
5answers
8k views

Securely hosting a Tor hidden service/site

There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
18
votes
2answers
2k views

How can I switch from one Tor Browser Bundle version to another? [closed]

I'm trying to use the Tor Browser Bundle (TBB) for everyday surfing. For convenience reasons I use bookmarks and sometimes install some addons. When a new version of the TBB comes out, I lose all of ...
12
votes
1answer
2k views

How can I use Chrome through Tor on OS X? [closed]

How do I properly set up Chrome on my Mac OS X machine to run all traffic through the Tor network when the Tor network is running? Chrome Version: 29.0.1547.76 Mac OS X Version: 10.8.5 Tor: 0.2.3....
13
votes
5answers
3k views

Aside from disabling Javascript in Firefox, how can I make Tor Browser Bundle more secure?

In a recent Tor security advisory, Roger Dingledine writes: Consider disabling JavaScript (click the blue "S" beside the green onion, and select "Forbid Scripts Globally"). Disabling ...
8
votes
4answers
1k views

How can I configure my network so that when Tor is running no other traffic can leave the box?

One of the fundamentals of Tor is that it can only really hide you if, when Tor is enabled and in use, you're using it exclusively. Agents wishing to de-anonymize you can examine requests to ...
2
votes
0answers
128 views

Are there any good practices to keep my Tor relay's private key safe? [closed]

Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe? We can take for granted that software packages constantly ...
4
votes
1answer
99 views

Why does my Tor Cloud bridge receive more traffic than it sends?

I am running a Tor Cloud EC2 instance. From the log files, it looks like it receives more traffic than it sends. What causes this?

15 30 50 per page