All Questions

Filter by
Sorted by
Tagged with
11
votes
3answers
1k views

How can I test an application for proxy leaks?

If I have an application that supports a SOCKS proxy, and I point it at a running Tor instance, how can I be sure that all traffic the application sends (including DNS requests) are sent through the ...
11
votes
1answer
577 views

How should I verify Tor downloads?

When I go to https://www.torproject.org/download/download.html to download the Tor Browser for Windows, how can I be sure that the package I'm downloading is genuine, and hasn't been tampered with? ...
11
votes
1answer
2k views

How are domain names created in the Tor network? [duplicate]

I wonder how the .onion domain names can be created? I mean, I don't assume that there is any central domain name provider. So how and where are those addresses created?
11
votes
3answers
5k views

How can a new circuit happen without closing all tabs?

Using the current version (3.5) of the Tor Browser Bundle, how can we switch to a new circuit without losing all tabs and activity? I understand the reason of "New Identity" means everything is ...
11
votes
1answer
535 views

Why does the number of open circuits fluctuate that much in my heartbeat logs?, new d

I have a new exit relay running on DSL. It's version 0.2.3.25 running on Windows. Most of the time, there's only a few connections, but every so often there's a lot more. They all appear and disappear ...
11
votes
3answers
857 views

How to programmatically detect a hidden service

Is there some magical way which I can programmatically detect whether a hidden service exists, is up, or is dead, other than trying to connect to it through the Tor socks protocol? I can connect ...
11
votes
1answer
288 views

How would a registration of the .onion gtld impact the Tor network?

The title pretty much says it all. What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
11
votes
1answer
1k views

Is it dangerous to use Tails without persistent entry guards?

Being a LiveCD with no persistent storage by default, Tails currently does not use persistent Tor entry guards. In a recent post on the Tor blog, arma discussed the possibility of "improving Tor's ...
10
votes
4answers
46k views

What are the best Tor2Web anonymous gateways?

What are the best Tor2Web anonymous gateways to make Hidden Web-Services available on clearnet/standard Internet?
10
votes
4answers
569 views

Can I help Tor if I just have webspace?

I'm thinking about how I can help Tor and its users. However I don't own big servers and also don't want to run a relay from my home. The only thing I have up to now is some private website. Is there ...
10
votes
4answers
88k views

Why can't Tor Browser use Adobe Flash Player?

So some games I tried on Tor need Adobe Flash Player. I've downloaded Adobe Flash Player three times now, and the game still can't be played. Any help?
10
votes
9answers
25k views

Where I can get largest list of Tor-friendly email services? [closed]

There was a TorMail: Tor Mail is a free anonymous email service provider http://tormail.org After FBI intel led to a raid in Ireland it become down http://jhiwjjlqpyawmpjx.onion I can use http://...
10
votes
1answer
2k views

Why is Tor written in C?

Why is Tor implemented in the C programming language? Was that decision a matter of luck or taste of Tor's inventors? Are there any advantages of implementing this kind of technology in C?
10
votes
2answers
3k views

Tor plug-in for Chromium?

Is there a plug-in for Chromium to activate and deactivate Tor? I've found plug-ins to manage HTTP proxies, but not SOCKS5.
10
votes
2answers
705 views

What is browser fingerprinting? What is linkability?

What do people refer to when they talk about browser fingerprinting? What is the difference between browser fingerprinting and linkability? Why is it important? For what is it used?
10
votes
4answers
5k views

Does my ISP know if I download Tor?

Does my Internet service provider know when and if I download Tor? How could I prevent that?
10
votes
3answers
15k views

CloudFlare's captcha screen insurmountable [closed]

CloudFlare's captcha screen appears more and more often during Tor browsing. First they ask for a CAPTCHA and that's ok. Then there's the copy/paste confirmation string. That should be the last ...
10
votes
4answers
309 views

Where in the world does Tor provide the highest degree of anonymity?

As we know, Tor hides users amongst the other users on the network, so the more populous and diverse the user base for Tor is, the more everybody's anonymity will be protected. So, in which part of ...
10
votes
2answers
1k views

What common sites are known to be troublesome for Tor use?

Certain sites block traffic from known exit nodes, and some sites simply show a CAPTCHA due to excessive abuse, etc. Is there a list of websites known to be troublesome for visitors using Tor?
10
votes
1answer
359 views

Can I expect the Tor Browser Bundle not to leak information to the file system and to other applications?

Was the Tor Browser Bundle built with aim not to leak information to the file system (e.g. to temporary files), to the disk in general (e.g. to the swap) and by other means to other applications (e.g. ...
10
votes
4answers
2k views

Is it possible to setup a private TOR relay

I have a proxy setup on one of my machines which is behind a router. And I need to use that proxy from another network. But my problem is that I cannot forward ports from the router to the proxy ...
10
votes
3answers
58k views

Configure tor as proxy

I'm trying to use Tor as a proxy, to make other apps connect to the internet through the tor network. With Tor running and connected I opened another browser, and in the proxy settings I typed 127.0.0....
10
votes
3answers
363 views

Is it secure to set the contact information when building up a Tor relay?

When I am setting up a tor relay, one option is to determine the contact information as an email address. Is it secure considering information harvesting by NSA for instance or would be better to hide ...
10
votes
4answers
7k views

Is the latest Tor-0.2.5.10 Expert Bundle broken?

I downloaded the latest Tor Expert Bundle here for Windows 7 and extracted the files and directory structure of the .zip to G:\tor-0.2.5.10. In case it matters, my extracted Tor directory structure is ...
10
votes
1answer
6k views

HTML5 Canvas Security Flaw

What security flaw with the HTML5 canvas is Tor Browser Bundle protecting you from when it pops up a notification about the canvas.
10
votes
2answers
2k views

How can I check if a Firefox plugin is a deanonymization threat?

There are many useful Firefox plugins and extensions that are compatible with the Tor Browser Bundle - how do I know which ones are safe to install without compromising my Tor anonymization?
10
votes
1answer
513 views

Do all relays in a circuit encrypt data response from a server?

I know that when sending data from the Tor client to a server it is encrypted and gradually get decrypted on the way there. This question is about when the server responds. The data must be encrypted ...
10
votes
2answers
3k views

Is it safe to import bookmarks?

Is is safe to import bookmarks from another browser into the Tor Browser? How can I import my bookmarks if it is safe? I have not tried anything because I am not sure
10
votes
2answers
17k views

Is there a Tor browser on the iPad with iOS 7?

I have spend many hours trying to find a browser to browse the internet with Tor on an iPad with iOS 7. I only found one which is "covert browser". But it seems it is not supported by the Tor project. ...
10
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
10
votes
2answers
286 views

Would running Tor client and Tor relay simultaneously harm my anonymity?

If I run a Tor relay in a machine and at the same time I use the same instance as a Tor client, would that harm my anonymity ? Would it be better to use different Tor instances on the same machine? ...
10
votes
3answers
3k views

Getting Tor to randomly use various Country IP's per session

I would like to have Tor use a different IP address in Canada every time I start or restart the application. Is that possible? If so, how?
10
votes
2answers
7k views

Tor on Chromebook/Chrome OS

Google's Chrome OS runs on Chromebooks built by different manufacturers. Various applications can be installed via the Chrome store but there's no straightforward way to install Tor. How could one ...
10
votes
1answer
1k views

The ReachableAddresses version of FascistFirewall

Is the following the equivalent of using FascistFirewall 1? ReachableAddresses accept *:80 ReachableAddresses accept *:443 I ask this because it seems that FascistFirewall will someday be deprecated ...
10
votes
1answer
902 views

How is data sent back from exit node to me?

I understand how the client sends the data through Tor to the sever. Onion routing Basically, it selects a set of nodes to form a circuit, say nodeA nodeB nodeC. It then encrypts the data this way: ...
10
votes
1answer
2k views

What are the minimum requirements for running a relay?

If I want to create a bunch of Tor relays running Linux with various VPS providers and want to save on cost, what is the minimum hardware config that I can get away with while still effectively ...
10
votes
1answer
2k views

Can anybody explain the Advertised bandwidth, MaxAdvertisedBandwidth, Measured bandwidth, Bandwidth burst, RelayBandwidth rate?

I am confused about a few terms: AdvertisedBandwidth, MaxAdvertisedBandwidth, MeasuredBandwidth, RelayBandwidthBurst, RelayBandwidthRate, BandwidthBurst, and BandwidthRate. Can anyone please explain ...
10
votes
5answers
3k views

DNSSEC & DNSCrypt over Tor

I want to use DNSSEC and DNSCrypt with Tor. I wonder which configuration is more secure and better? SOCKS4 + dnscrypt-proxy: Forward the DNS traffic to a DNS server which I choose. Although the DNS ...
10
votes
2answers
552 views

What does NSA's attempt to deannonymize Tor mean for the average Tor user?

What do there revelations mean for us? http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity
10
votes
0answers
358 views

Why does adding a Guard-Exit (EE) node in Tor yield more catch probability than adding a guard and exit node separately? [duplicate]

The following is the default Tor network in shadow simulator: Total BW of Guard flagged nodes=258.15 MB/S Total BW of Middle nodes=23.69 MB/S Total BW of Exit flagged nodes=13.23 MB/S Total BW ...
9
votes
4answers
326 views

May I do security inspection on exit relays?

If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
9
votes
3answers
23k views

HTML 5 canvas Imagedata Extraction, what does it actually mean?

I got the following when reaching github.com This website (github.com) attempted to extract HTML5 canvas image data, which may be used to uniquely identify your computer. Should Tor browser allow ...
9
votes
2answers
1k views

When does a relay get the Named flag?

A new relay of mine has been flagged as Stable and Guard, but not Named. What are the criteria for receiving the Named flag?
9
votes
2answers
2k views

Should I choose a new guard if the network is overloaded?

When I start the Tor Browser Bundle I sometimes see the message: Your Guard … is failing more circuits than usual. Most likely this means the Tor network is overloaded. If this one guard node is ...
9
votes
3answers
4k views

Do all .onion addresses use SSL/TLS?

Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
9
votes
4answers
3k views

Is it possible to run a secure email network using SMTP over Tor?

I have thought about some of the security issues inherent in email. For example that even if the body is encrypted the headers are plain text so metadata is available. I was wondering if this could ...
9
votes
2answers
2k views

How are 'Pluggable Transport' bundles different from 'regular' Tor Browser Bundles?

The Tor Project releases both Tor Browser Bundles, and Pluggable Transport Tor Browser Bundles. How are these different? How should I decide which bundle to use?
9
votes
2answers
4k views

How reliable is setting an exit via country code?

In torrc, you can select exit nodes by country code (https://www.torproject.org/docs/faq.html.en#ChooseEntryExit) - how reliable is that selection? Could a malicious (or simply poorly-configured) ...
9
votes
4answers
47k views

Tor via VPN: Good extra level of security, or unnecessary?

The title pretty much says it all. I'm using Tor with PIA VPN also running. Is this a good extra level of security, or just a waste of time. Thanks all.
9
votes
4answers
2k views

Is there a way to defend oneself against a timing attack?

Is there a way for an end user to protect oneself against the timing attack when using Tor? For those, who are not familiar with it, a timing attack involves an adversary populating the Tor cloud ...

15 30 50 per page