All Questions

Filter by
Sorted by
Tagged with
9
votes
2answers
5k views

How reliable is setting an exit via country code?

In torrc, you can select exit nodes by country code (https://www.torproject.org/docs/faq.html.en#ChooseEntryExit) - how reliable is that selection? Could a malicious (or simply poorly-configured) ...
9
votes
4answers
51k views

Tor via VPN: Good extra level of security, or unnecessary?

The title pretty much says it all. I'm using Tor with PIA VPN also running. Is this a good extra level of security, or just a waste of time. Thanks all.
9
votes
4answers
2k views

Is there a way to defend oneself against a timing attack?

Is there a way for an end user to protect oneself against the timing attack when using Tor? For those, who are not familiar with it, a timing attack involves an adversary populating the Tor cloud ...
9
votes
3answers
340 views

Why are there only 1000 exit relays?

I see from the Tor network-metrics page that there are only ~1000 exit relays. Even if the Tor browser is secure, having so few exit relays limits the anonymity provided, right? How could the Tor ...
9
votes
2answers
19k views

How to change country in Mac OS X?

How do I change the exit node country for TorBrowser on Mac OS X? I can't find a file called "torrc" on my Mac.
9
votes
2answers
16k views

Using curl over a normal tor installation, not tor-browser-bundle, on debian wheezy

I installed a tor relay on debian wheezy and it runs fine. Now I want to use curl and I used: curl --socks5 127.0.0.1:9150 http://www.torproject.org But it couldn't connect to the host. If I start ...
9
votes
5answers
10k views

Have Tor appear to be a different browser

I was wondering is there a way to fool websites into thinking that I am using another browser instead of what I'm really using, Tor Browser. Say I wanted example.com to see me connecting to them using ...
9
votes
2answers
18k views

How to add obfs3 bridges in torrc?

I have installed Tor on my Ubuntu system, not the Tor browser bundle. Now I can add bridges into torrc file and it's ok. But I want to know how can I add obfs3 bridges into torrc file?
9
votes
3answers
22k views

My OSX is saying “TorBrowserBundle_en-US” can't be opened because it is from an unidentified developer

I've downloaded the TBB but it won't open because "TorBrowserBundle_en-US" is from an "unidentified developer". How do I solve this?
9
votes
1answer
313 views

Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?

Assume someone wants to disrupt the Tor network or maybe bring it down. A powerful attacker could try to DDoS all the directory authorities. As there are only 10 worldwide this seems like an easy task....
9
votes
1answer
1k views

Traffic secrecy in rendezvous points

In the Tor hidden service design Alice and Bob communicate via a rendezvous point that they agree to at one of the hidden service's introduction point. Can either of these nodes observe traffic ...
9
votes
1answer
6k views

Does Tor work with WebRTC?

WebRTC is yet another technology that has the possibility to change the face of the web, but is it supported in Tor ? Searching the tor-dev mailing, there is this thread on the WebRTC but it is ...
9
votes
1answer
94 views

Would relay with temporary keys live the same great as with constant keys?

I'm on Debian-like OS. Directory /var/lib/tor/keys/ contains secret_id_key and secret_onion_key RSA keys. Would my relay work the same with 5Mb/s of bandwidth if I remove these keys each reboot, ...
9
votes
1answer
581 views

Why is a longer guard rotation period with fewer guards better than the other way around?

Tor introduced guards, which are - oversimplified said - relays the client picks and holds for some time as the first hop, to protect the client against the so-called 'predecessor attack'. Entry ...
9
votes
2answers
791 views

Why do some websites have both onion address and non onion address?

Some websites have both public address and also a onion address. By having a public address, the service is no longer a hidden service. What is the point in having a .onion address? As a user, is ...
9
votes
1answer
51k views

Most .onion sites I am trying to access are unavailable: Why and how can I solve this? [duplicate]

I think that 80% of the onion sites I'm trying to reach are most of the time (if not always) unavailable. It tells me that Firefox can't estabilish a connection to the server at *****.onion and ...
9
votes
2answers
30k views

Proxy server is refusing connection

When launching the Tor browser from its folder it keeps on failing. The Connection Settings is set to Manual Proxy with SOCKS Host at 127.0.0.1 Port 9150 v5.
9
votes
3answers
407 views

What can I do to reduce risk of malicious traffic leaving my exit relay besides setting the exit policy?

I am considering running an exit relay. Unfortunately this opens possibility of legal issues and traffic restrictions from my Internet Service Provider. See Abuse FAQ and Legal FAQ. There is a nice ...
9
votes
1answer
267 views

Can you confirm that my IP address was a Tor relay a few months ago?

Let's assume I received a letter today that accuses me of downloading an illegal file, posting something inappropriate in a forum, or hacking into a system. And that happened a few months ago. But I ...
9
votes
1answer
3k views

Why should users not use the same browser for both I2P and Tor?

In several forums and articles that I have read people say that the best security for users that want to run both Tor and I2P is to use separate browsers for each. What are the security and anonymity ...
9
votes
2answers
601 views

How does the pluggable transport version of TBB affect browsing?

Does using the pluggable transport Tor Browser Bundle with an Obfs3 bridge affect browsing speed in a noticeable way? I am interested in using an Obfusproxy to hide my Tor usage form my ISP but I ...
9
votes
2answers
802 views

Could I run the hidden service software(e.g webserver) in a different system than the one Tor is running?

Running a hidden service in a secure way can be a really complicated matter. Ideally the system where the hidden service software (e.g. a web server) lives should not have a publicly routable IP ...
9
votes
1answer
5k views

RDP over Tor - safe?

I am considering using remote desktop protocol(RDP) over Tor, to circumvent my country's blockade of RDP and also get the most of anonymity. I just tested a RDP connection with proxy chains remmina. ...
9
votes
2answers
2k views

Keyboard is not responsive inside of Tor's firefox

When running Tor via the Tor Browser Bundle, Vidalia works fine, Tor runs and connected, Firefox runs and connects to https://check.torproject.org which tells me that I have Tor enabled with an IP ...
9
votes
1answer
145 views

Does Tor take node age into consideration when building a circuit?

I've seen this for a while, but in my experience Tor seems to select well stablished nodes (whose uptime is >60 days) but in the specifications this is not shown. It's just that the current list of ...
9
votes
5answers
18k views

TAILS on USB: How to use the rest of the stick

I put the TAILS ISO on a 32GB USB stick with 'dd' (Didn't have a smaller one.) diskutil GUI says the resulting partition is one GB but df in the terminal says it is four GB. diskutil does show the ...
9
votes
2answers
747 views

Can you make Tor change servers every time I refresh a page?

I'm trying to build a bot but I need it that Tor will change servers every time I refresh the page. I could also use one if I get to manually change it using a command line. Any suggestions?
9
votes
1answer
349 views

My exit-node suddenly lost all of its consensus weight, I don't know where to start troubleshooting

The node in question is the following: https://atlas.torproject.org/#details/3D7E274A87D9A89AF064C13D1EE4CA1F184F2600 The node has been restarted recently in hope of that fixing it, alas to no avail....
9
votes
1answer
81 views

Can intermediary nodes learn the length of a circuit?

This should be impossible because of the layered encryption, but some documentation suggests that this can somehow be done. From Section 5.6 [1] of tor's specification When speaking v2 of the link ...
9
votes
1answer
299 views

How many clients are typically using Tor simultaneously? How many circuits are simultaneously in use?

From Tor Metrics: Users, I get that there are currently about 2.4 million "directly connecting users". And in Questions and answers about user statistics, I see: Q: So, are these distinct users per ...
8
votes
4answers
970 views

Does it make sense to use Tor on a vanilla Android phone?

I use Tor on Android because it's easily configurable for Duck Duck Go and Twitter with Orbot. It's possible to use it with a stable Firefox version too but I can't because I use the beta version. On ...
8
votes
4answers
1k views

How can I configure my network so that when Tor is running no other traffic can leave the box?

One of the fundamentals of Tor is that it can only really hide you if, when Tor is enabled and in use, you're using it exclusively. Agents wishing to de-anonymize you can examine requests to ...
8
votes
2answers
257 views

Why does hard coded node 'Faravahar' have a different geolocation (USA) than registrar (Mauritius)?

I was editing an IT Security stack exchange question to add geolocation information to a Tor question and I noticed that one of the 10 hard coded directory authorities is ambiguous about its location: ...
8
votes
3answers
72k views

How do I add the DuckDuckGo .onion version to the Tor Browser search providers?

By default, DuckDuckGo is included in TBB's default list of search providers in the search bar. But it is only their clearnet site (duckduckgo.com), and not their hidden service version, https://...
8
votes
4answers
16k views

How can I use Tor without my ISP knowing?

I guess my first question should be, does my ISP know when I'm using Tor? I read somewhere that they do. In that case, the anonymity offered by Tor is rather limited. If someone suspects I posted ...
8
votes
2answers
426 views

Why doesn't the Tor Browser Bundle include CAcert root cert?

CAcert is a community based approach to create a certificate authority. Many sites use it (i.e. CCC). However the root certificate is not yet present in major browsers and also not in the Tor Browser ...
8
votes
1answer
38k views

How to properly start tor service

For months I've been using: $ sudo systemctl start tor.service but I just realized we can start tor by simply typing "tor" into a terminal. What's the proper/safest way to start and stop tor.service?...
8
votes
6answers
794 views

Releasing a controversial movie torrent using Tor Network for security

I live in a dictatorship and use the Tor Network to get around censorship. I read that Torrenting over Tor Network is not good because of high Internet usage and it slows everything down. For a short ...
8
votes
2answers
746 views

Can using Tor make you a suspect?

When you are browsing regular WWW through Tor last node's (exit node's) IP is known to the server, also exit node's ISP can observe the traffic. So if somebody is browsing sites with illegal content (...
8
votes
3answers
165k views

How can I use Tor browser on my iphone without jail breaking it?

How can I use Tor browser on my iphone that is not jail broken?
8
votes
1answer
59k views

How can I use plugins in TorBrowser?

I visited a streaming site in TorBrowser, but it said it needed a plugin to stream videos. I've already installed the latest version of Adobe Flash Player, but it still won't stream videos or play ...
8
votes
2answers
2k views

Is there any Tor's network technical details paper?

I'm looking for technical details of tor's infrastructure. I did a little search but couldn't find anything special except https://www.torproject.org/about/overview.html.en which is not very in ...
8
votes
4answers
26k views

How to change the entry node?

When Tor changes circuit it only changes middle node and exit node, the entry node stays the same since the Tor started, so I guess the entry node is limiting the traffic if you make too much traffic,...
8
votes
6answers
21k views

Sending anonymous email

I need to send a completely anonymous email, with no trace of myself, my IP and my computer. Can I send it via Tor using an ordinary email server, ie, gmail, yahoo, whatever? PLEASE, I'm an ordinary ...
8
votes
3answers
133 views

Low power self-maintaining Tor relay

Over the summer, I'm looking into depositing Tor relays (not exit nodes!) with my friends in family in the form of something that they can plug in and forget about. I've read about the Rasberry Pi ...
8
votes
2answers
5k views

How do I make Tor use IPv6 for connecting to other peers?

Even if I put the following, it still only makes IPv4 connections to the outside world: ORPort [::]:9001 IPv6Only OutboundBindAddress [::] Bridge [<an IPv6 of a tor node of mine>]:9001 ...
8
votes
2answers
2k views

What implementations of Tor are there?

I have seen implementations such as the Tor Browser Bundle and a TorChat, based on the Tor network. I was wondering if there were any more of them out there?
8
votes
3answers
4k views

How to tell my Tor Browser to use a certain relay as entry point?

I am running a Tor relay on a remote server that is hosted in a professional server farm about 1000 km away from my home. I am absolutely sure, that this Tor relay is secure because I am root on this ...
8
votes
3answers
83k views

How do I uninstall Tor browser from Windows 7?

I need to get detailed instructions how to completely remove Tor browser from Windows 7.
8
votes
1answer
2k views

How can one move its relay to another server without losing anything?

Supposing one runs a server on some server and wants to move it to another. How can this be done without losing the flags (like stable, guard, named) and the progress to get a t-shirt, if certain ...

15 30 50 per page