All Questions

11
votes
3answers
5k views

How can a new circuit happen without closing all tabs?

Using the current version (3.5) of the Tor Browser Bundle, how can we switch to a new circuit without losing all tabs and activity? I understand the reason of "New Identity" means everything is ...
11
votes
1answer
517 views

Why does the number of open circuits fluctuate that much in my heartbeat logs?, new d

I have a new exit relay running on DSL. It's version 0.2.3.25 running on Windows. Most of the time, there's only a few connections, but every so often there's a lot more. They all appear and disappear ...
11
votes
3answers
832 views

How to programmatically detect a hidden service

Is there some magical way which I can programmatically detect whether a hidden service exists, is up, or is dead, other than trying to connect to it through the Tor socks protocol? I can connect ...
11
votes
1answer
282 views

How would a registration of the .onion gtld impact the Tor network?

The title pretty much says it all. What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
11
votes
1answer
3k views

How to protect a hidden service against DDOS attack?

How to protect a hidden service against DDOS attack? I did some research and found that it is possible to do load balancing with HAProxy. Is there any other solution that could be implemented?
11
votes
1answer
1k views

Is it dangerous to use Tails without persistent entry guards?

Being a LiveCD with no persistent storage by default, Tails currently does not use persistent Tor entry guards. In a recent post on the Tor blog, arma discussed the possibility of "improving Tor's ...
10
votes
4answers
44k views

What are the best Tor2Web anonymous gateways?

What are the best Tor2Web anonymous gateways to make Hidden Web-Services available on clearnet/standard Internet?
10
votes
4answers
566 views

Can I help Tor if I just have webspace?

I'm thinking about how I can help Tor and its users. However I don't own big servers and also don't want to run a relay from my home. The only thing I have up to now is some private website. Is there ...
10
votes
4answers
86k views

Why can't Tor Browser use Adobe Flash Player?

So some games I tried on Tor need Adobe Flash Player. I've downloaded Adobe Flash Player three times now, and the game still can't be played. Any help?
10
votes
9answers
24k views

Where I can get largest list of Tor-friendly email services? [closed]

There was a TorMail: Tor Mail is a free anonymous email service provider http://tormail.org After FBI intel led to a raid in Ireland it become down http://jhiwjjlqpyawmpjx.onion I can use http://...
10
votes
1answer
1k views

Why is Tor written in C?

Why is Tor implemented in the C programming language? Was that decision a matter of luck or taste of Tor's inventors? Are there any advantages of implementing this kind of technology in C?
10
votes
2answers
3k views

Tor plug-in for Chromium?

Is there a plug-in for Chromium to activate and deactivate Tor? I've found plug-ins to manage HTTP proxies, but not SOCKS5.
10
votes
2answers
691 views

What is browser fingerprinting? What is linkability?

What do people refer to when they talk about browser fingerprinting? What is the difference between browser fingerprinting and linkability? Why is it important? For what is it used?
10
votes
2answers
15k views

How to check if Tor is working and debug the problem on CLI?

I have installed Tor on a command-line only environment without the browser, so I can't use check.torproject.org with a browser. Tor is used by a script to request data from clearnet. The tor service ...
10
votes
4answers
5k views

Does my ISP know if I download Tor?

Does my Internet service provider know when and if I download Tor? How could I prevent that?
10
votes
3answers
15k views

CloudFlare's captcha screen insurmountable [closed]

CloudFlare's captcha screen appears more and more often during Tor browsing. First they ask for a CAPTCHA and that's ok. Then there's the copy/paste confirmation string. That should be the last ...
10
votes
4answers
303 views

Where in the world does Tor provide the highest degree of anonymity?

As we know, Tor hides users amongst the other users on the network, so the more populous and diverse the user base for Tor is, the more everybody's anonymity will be protected. So, in which part of ...
10
votes
2answers
1k views

What common sites are known to be troublesome for Tor use?

Certain sites block traffic from known exit nodes, and some sites simply show a CAPTCHA due to excessive abuse, etc. Is there a list of websites known to be troublesome for visitors using Tor?
10
votes
1answer
353 views

Can I expect the Tor Browser Bundle not to leak information to the file system and to other applications?

Was the Tor Browser Bundle built with aim not to leak information to the file system (e.g. to temporary files), to the disk in general (e.g. to the swap) and by other means to other applications (e.g. ...
10
votes
3answers
359 views

Is it secure to set the contact information when building up a Tor relay?

When I am setting up a tor relay, one option is to determine the contact information as an email address. Is it secure considering information harvesting by NSA for instance or would be better to hide ...
10
votes
4answers
7k views

Is the latest Tor-0.2.5.10 Expert Bundle broken?

I downloaded the latest Tor Expert Bundle here for Windows 7 and extracted the files and directory structure of the .zip to G:\tor-0.2.5.10. In case it matters, my extracted Tor directory structure is ...
10
votes
1answer
5k views

HTML5 Canvas Security Flaw

What security flaw with the HTML5 canvas is Tor Browser Bundle protecting you from when it pops up a notification about the canvas.
10
votes
1answer
1k views

Hidden .onion service with 2048 bit (or 4096 bit) RSA private key — how to host it?

2048 bit RSA is proven to be more secure than 1024 bit, so with the help of Scallion I have generated a pair of hidden service hostname + 2048 bit private key for it (there were 1024b 2048b and 4096b ...
10
votes
2answers
3k views

Is it safe to import bookmarks?

Is is safe to import bookmarks from another browser into the Tor Browser? How can I import my bookmarks if it is safe? I have not tried anything because I am not sure
10
votes
1answer
492 views

Do all relays in a circuit encrypt data response from a server?

I know that when sending data from the Tor client to a server it is encrypted and gradually get decrypted on the way there. This question is about when the server responds. The data must be encrypted ...
10
votes
2answers
17k views

Is there a Tor browser on the iPad with iOS 7?

I have spend many hours trying to find a browser to browse the internet with Tor on an iPad with iOS 7. I only found one which is "covert browser". But it seems it is not supported by the Tor project. ...
10
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
10
votes
2answers
281 views

Would running Tor client and Tor relay simultaneously harm my anonymity?

If I run a Tor relay in a machine and at the same time I use the same instance as a Tor client, would that harm my anonymity ? Would it be better to use different Tor instances on the same machine? ...
10
votes
3answers
3k views

Getting Tor to randomly use various Country IP's per session

I would like to have Tor use a different IP address in Canada every time I start or restart the application. Is that possible? If so, how?
10
votes
1answer
1k views

The ReachableAddresses version of FascistFirewall

Is the following the equivalent of using FascistFirewall 1? ReachableAddresses accept *:80 ReachableAddresses accept *:443 I ask this because it seems that FascistFirewall will someday be deprecated ...
10
votes
1answer
2k views

What are the minimum requirements for running a relay?

If I want to create a bunch of Tor relays running Linux with various VPS providers and want to save on cost, what is the minimum hardware config that I can get away with while still effectively ...
10
votes
1answer
2k views

Can anybody explain the Advertised bandwidth, MaxAdvertisedBandwidth, Measured bandwidth, Bandwidth burst, RelayBandwidth rate?

I am confused about a few terms: AdvertisedBandwidth, MaxAdvertisedBandwidth, MeasuredBandwidth, RelayBandwidthBurst, RelayBandwidthRate, BandwidthBurst, and BandwidthRate. Can anyone please explain ...
10
votes
5answers
3k views

DNSSEC & DNSCrypt over Tor

I want to use DNSSEC and DNSCrypt with Tor. I wonder which configuration is more secure and better? SOCKS4 + dnscrypt-proxy: Forward the DNS traffic to a DNS server which I choose. Although the DNS ...
10
votes
2answers
546 views

What does NSA's attempt to deannonymize Tor mean for the average Tor user?

What do there revelations mean for us? http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity
10
votes
0answers
357 views

Why does adding a Guard-Exit (EE) node in Tor yield more catch probability than adding a guard and exit node separately? [duplicate]

The following is the default Tor network in shadow simulator: Total BW of Guard flagged nodes=258.15 MB/S Total BW of Middle nodes=23.69 MB/S Total BW of Exit flagged nodes=13.23 MB/S Total BW ...
9
votes
4answers
323 views

May I do security inspection on exit relays?

If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ...
9
votes
2answers
1k views

When does a relay get the Named flag?

A new relay of mine has been flagged as Stable and Guard, but not Named. What are the criteria for receiving the Named flag?
9
votes
2answers
2k views

Should I choose a new guard if the network is overloaded?

When I start the Tor Browser Bundle I sometimes see the message: Your Guard … is failing more circuits than usual. Most likely this means the Tor network is overloaded. If this one guard node is ...
9
votes
3answers
4k views

Do all .onion addresses use SSL/TLS?

Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
9
votes
4answers
3k views

Is it possible to run a secure email network using SMTP over Tor?

I have thought about some of the security issues inherent in email. For example that even if the body is encrypted the headers are plain text so metadata is available. I was wondering if this could ...
9
votes
2answers
2k views

How are 'Pluggable Transport' bundles different from 'regular' Tor Browser Bundles?

The Tor Project releases both Tor Browser Bundles, and Pluggable Transport Tor Browser Bundles. How are these different? How should I decide which bundle to use?
9
votes
2answers
4k views

How reliable is setting an exit via country code?

In torrc, you can select exit nodes by country code (https://www.torproject.org/docs/faq.html.en#ChooseEntryExit) - how reliable is that selection? Could a malicious (or simply poorly-configured) ...
9
votes
4answers
46k views

Tor via VPN: Good extra level of security, or unnecessary?

The title pretty much says it all. I'm using Tor with PIA VPN also running. Is this a good extra level of security, or just a waste of time. Thanks all.
9
votes
4answers
2k views

Is there a way to defend oneself against a timing attack?

Is there a way for an end user to protect oneself against the timing attack when using Tor? For those, who are not familiar with it, a timing attack involves an adversary populating the Tor cloud ...
9
votes
3answers
317 views

Why are there only 1000 exit relays?

I see from the Tor network-metrics page that there are only ~1000 exit relays. Even if the Tor browser is secure, having so few exit relays limits the anonymity provided, right? How could the Tor ...
9
votes
4answers
2k views

Is it possible to setup a private TOR relay

I have a proxy setup on one of my machines which is behind a router. And I need to use that proxy from another network. But my problem is that I cannot forward ports from the router to the proxy ...
9
votes
2answers
52k views

Configure tor as proxy

I'm trying to use Tor as a proxy, to make other apps connect to the internet through the tor network. With Tor running and connected I opened another browser, and in the proxy settings I typed 127.0.0....
9
votes
2answers
14k views

Using curl over a normal tor installation, not tor-browser-bundle, on debian wheezy

I installed a tor relay on debian wheezy and it runs fine. Now I want to use curl and I used: curl --socks5 127.0.0.1:9150 http://www.torproject.org But it couldn't connect to the host. If I start ...
9
votes
2answers
2k views

How can I check if a Firefox plugin is a deanonymization threat?

There are many useful Firefox plugins and extensions that are compatible with the Tor Browser Bundle - how do I know which ones are safe to install without compromising my Tor anonymization?
9
votes
3answers
22k views

My OSX is saying “TorBrowserBundle_en-US” can't be opened because it is from an unidentified developer

I've downloaded the TBB but it won't open because "TorBrowserBundle_en-US" is from an "unidentified developer". How do I solve this?

15 30 50 per page