All Questions

Filter by
Sorted by
Tagged with
13
votes
1answer
1k views

Chromium browser bundle

What is the current state of porting the TBB from Firefox to Chromium? Several years back the Tor Project blog mentioned work by the Chromium developers to implement the needed APIs; since then, ...
9
votes
1answer
93 views

Would relay with temporary keys live the same great as with constant keys?

I'm on Debian-like OS. Directory /var/lib/tor/keys/ contains secret_id_key and secret_onion_key RSA keys. Would my relay work the same with 5Mb/s of bandwidth if I remove these keys each reboot, ...
8
votes
2answers
499 views

Why do I get an avast notice on my host (!) machine when I run tails in a virtual machine?

About 30-50% of the times I run tails in a vm my avast pops up a notice on the host complaining about some problem with a certificate. The sites, however, do not seem to exist and the url looks more ...
3
votes
1answer
378 views

Would anoNet-style darknets of Tor hidden services be workable?

Reading user329's question about running a secure email network using SMTP over Tor, I was wondering how standard email transport could be implemented among hidden services. And then I remembered ...
3
votes
1answer
680 views

How many Tor-like networks are around?

I'm about an idea, onion routing. Are there a secret or governments or a half-secret projects with similar technology? For example, DARPA-BAA-10-69 is a project called "SAFER" (May 20, 2010). The ...
4
votes
1answer
500 views

I want to setup my own Tor implemintation, what should I take for?

I have download latest source. Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only? How much nodes should I setup around the world for small group of confederates?
4
votes
1answer
985 views

How to implement transparent proxy on OS X?

I run Tor on my MacBook Air, which has two interfaces: USB Ethernet Adapter and Wifi. I want to use my MacBook as transparent proxy so that it can share the Tor connection through Wifi for cell phones....
1
vote
1answer
148 views

Is this possible and if so would it be useful to cracking some hidden services? [closed]

I found this on StackOverflow and I found it interesting... If this is possible wouldn't this be so useful to the feds? It asks can you get the server ip address from a mysql database for a login ...
4
votes
1answer
224 views

Where along the path is encryption used?

This question is born out of two questions that I saw coming up. Is the connection between my computer and the Tor network encrypted? How does Tor encrypt my traffic before it sends it to the server?...
11
votes
1answer
539 views

Why does the number of open circuits fluctuate that much in my heartbeat logs?, new d

I have a new exit relay running on DSL. It's version 0.2.3.25 running on Windows. Most of the time, there's only a few connections, but every so often there's a lot more. They all appear and disappear ...
13
votes
1answer
4k views

Why does Tor use three hops, instead of two?

With onion-routing a relay in a circuit only knows its predecessor and its successor, while a "normal" proxy is just one hop, so that it knows who connects to it and where it has to connect to. ...
4
votes
1answer
497 views

Would Tor remain anonymous in a post-quantum future?

I'm writing a near-future sci-fi novel where general quantum computing has been developed and SSL has been replaced with a security protocol based on quantum key distribution (QKD). Tor would still be ...
4
votes
1answer
207 views

What does “[warn] Query '[scrubbed]' didn't have valid rend desc in cache. Failing.” mean?

I am transferring files over Tor and I am seeing the following message in my Tor log file. Can someone explain what it means? [warn] Query '[scrubbed]' didn't have valid rend desc in cache. Failing.
4
votes
1answer
153 views

Is TorBirdy also securing requests by Thunderbird to PGP keyservers?

I use Icedove/Thunderbird on Debian together with TorBirdy. And it works very well. Now I created a new keypair and uploaded it to a keyserver and asked myself if TorBirdy is taking care of this ...
7
votes
4answers
267 views

How can find my Amazon EC2 Bridge with Globe

I installed a cloud bridge on Amazon EC2. Now I wanted to find it using Globe (http://globe.rndm.de/). But what name do I search for? I didn't choose one.
5
votes
1answer
99 views

How to protect against DoS but not harm Tor users

Often when websites want to protect themselves against Denial-of-Service attacks, they will limit the number of requests one IP address can make in a given span of time. Sometimes this practice ...
2
votes
2answers
4k views

How to virtual box tails in a tails environment?

How to virtual box tails in a tails environment? I'm Noob, need the step by step. I see there's several ideas but no step by step guide for the current/future distros. Please walk me through how to ...
3
votes
1answer
302 views

Why is the amount of incoming/outgoing traffic different on a non-exit relay?

I noticed something when letting a relay (non exit) run for a few days: The amount of traffic sent is larger than the amount received. This is confirmed by looking at the tor log and also by looking ...
3
votes
3answers
342 views

How are the exit and non-exit packets in the Tor relay system recognized?

Relay setting in Vidalia has two options for relaying: "for the Tor network" and "inside the Tor network". The options enable relaying either just inside the Tor network or additionally out of the Tor ...
9
votes
4answers
3k views

Is it possible to run a secure email network using SMTP over Tor?

I have thought about some of the security issues inherent in email. For example that even if the body is encrypted the headers are plain text so metadata is available. I was wondering if this could ...
1
vote
1answer
289 views

How can I change from a private to a obfsproxy bridge on Amazon AWS?

I set up an AWS server as a private bridge, but actually wanted to have a obfsproxy bridge. Is it possible to change it later, or should I delete the old server and set up a new one?
1
vote
1answer
685 views

Accessing my Amazon AWS Tor Bridge

I just set up a Tor Bridge on a Amazon AWS Server (very good explanation how to do that on https://cloud.torproject.org/). Now its up and running and I try to access it. I copied the private key (tor-...
4
votes
1answer
3k views

Tor hidden service on Raspberry Pi

I want to set up a Tor hidden service on a Raspberry Pi. What is a good way to do that? Maybe start with Occidentalis v0.2 by Adafruit? Is there a special tutorial for the Raspberry PI?
2
votes
2answers
396 views

Are low bandwidth DoS attacks performed over the Tor network a problem to be considered?

For low bandwidth and slow DoS / DDoS attacks (for example Slowloris, SlowLoris and PyLoris) the Tor network seems to be very useful medium. For free it offers two important things to the attacker: ...
10
votes
1answer
2k views

Why is Tor written in C?

Why is Tor implemented in the C programming language? Was that decision a matter of luck or taste of Tor's inventors? Are there any advantages of implementing this kind of technology in C?
5
votes
2answers
1k views

Is it posible to choose what entry node you want to use?

If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than ...
15
votes
3answers
1k views

Register .onion as gTLD?

For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN: On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
12
votes
2answers
11k views

Secure my connection with VPN router & Tor

I just decided to buy a new router that support the OpenVPN protocols called "Linksys E4200". It is a very very good router. I read about Tor Over VPN & VPN over Tor. So my first question is: ...
4
votes
1answer
371 views

Can I run an exit relay through a VPN service?

Is it possible to run an exit relay through a VPN service? As long as the service provider has approved this, is it otherwise workable? Do any technical limitations or performance disadvantages make ...
6
votes
1answer
568 views

How are Hidden Service Locations Protected From Exit Nodes?

What is to prevent exit nodes from seeing the location of servers hosting Tor hidden services?
8
votes
1answer
2k views

What is the difference between NTor and TAP?

Recently I read that Tor switched from TAP handshake requests to NTor handshake requests. This seems to improve the performance and doesn't put such a high load on relays (because of Mevade). However ...
4
votes
1answer
136 views

Randomized testing of Tor options

When looking at the Tor manpage one sees lots of different options. They range from general options to some which are specific to relays, hidden services etc. I'm asking myself if each of those ...
5
votes
1answer
584 views

How does misconfigured time affect Tor?

Tor users and Tor relays across the world have different time zones. How does misconfigured time affects Tor operation either on client or server side? Is there a time skew margin in which Tor still ...
9
votes
2answers
591 views

How does the pluggable transport version of TBB affect browsing?

Does using the pluggable transport Tor Browser Bundle with an Obfs3 bridge affect browsing speed in a noticeable way? I am interested in using an Obfusproxy to hide my Tor usage form my ISP but I ...
14
votes
3answers
6k views

Is running Tor over Tor dangerous?

I've read somewhere that running Tor over another Tor connection is not only non-productive but actually dangerous? For example: say I were running TBB on my machine and was running Whonix in 2 VMs ...
28
votes
2answers
11k views

What are good explanations for relay flags?

We received an Atlas patch that adds tooltips to relay flags, so that relay operators can better understand what these flags mean. The patch author used dir-spec.txt as their guide. I wonder if ...
5
votes
3answers
963 views

Tor fingerprinting on NSA Egotisticalgiraffe document

On page 11 and 12 of this document: http://www.theguardian.com/world/interactive/2013/oct/04/egotistical-giraffe-nsa-tor-document they say it's easy to dinstinguish Tor users from non-Tor users ...
4
votes
2answers
134 views

How can volunteers join the RT team?

I heard that Tor has a tracking system where all requests for help land. Assume that someone has some time over the day and want to help to answer those requests. What specific knowledge does one need ...
11
votes
3answers
859 views

How to programmatically detect a hidden service

Is there some magical way which I can programmatically detect whether a hidden service exists, is up, or is dead, other than trying to connect to it through the Tor socks protocol? I can connect ...
9
votes
2answers
4k views

How reliable is setting an exit via country code?

In torrc, you can select exit nodes by country code (https://www.torproject.org/docs/faq.html.en#ChooseEntryExit) - how reliable is that selection? Could a malicious (or simply poorly-configured) ...
1
vote
1answer
190 views

US govt funds Tor development while NSA attacks it [closed]

How does this work? Moreover, isn't it dangerous that "As of 2012, 80% of the Tor Project's $2M annual budget comes from the United States government, with the Swedish government and other ...
1
vote
1answer
2k views

Can I configure, which DNS server Tor should use to resolve proxy.hostname.com?

As far I understand, for the most part, Tor usually does not use system DNS. When a http proxy is configured in torrc, Tor obviously has to resolve proxy.hostname.com to a IP. And doing the resolving ...
1
vote
2answers
210 views

Tor Anonymous Level Mixing

Tor's website advises against mixing levels of anonymity, but does this apply across browsers? That is, can I browse websites in Firefox, chrome, IE etc without exposing my Tor traffic in Vidalia? ...
5
votes
1answer
2k views

Tor compiling error - undefined symbols in libor-crypto.a

So I'm trying to (re-)compile Tor 0.2.3.25 (gzipped tarball) on my OS X 10.5.8 system (with GCC 4.0.1) and it's currently dying horribly here: gcc -g -O2 -D_FORTIFY_SOURCE=2 -fstack-protector-all -...
9
votes
1answer
536 views

Why is a longer guard rotation period with fewer guards better than the other way around?

Tor introduced guards, which are - oversimplified said - relays the client picks and holds for some time as the first hop, to protect the client against the so-called 'predecessor attack'. Entry ...
8
votes
1answer
929 views

What does the Tor Browser Bundle do to prevent the linking of sessions?

What changes are made to the Tor Brower Bundle or what does it ship with to prevent a website from linking user session together, including fingerprinting on the device such as browser or system ...
4
votes
2answers
373 views

Can Tor connections between hidden services be aggregated using ifenslave? (… and might Mevade be doing this?)

Using ifenslave on two endpoint Linux servers, it's possible to aggregate (aka bond or team) multiple tun or tap interfaces (e.g., tun0, tun1, ...) into a single link, combining bandwidth (less ...
10
votes
1answer
2k views

How do entry guards protect against a service location attack?

The paper Locating Hidden Servers mentions three attacks that can reveal the location of hidden servers. Among those is the service location attack. The paper states that the Tor network's use of ...
6
votes
1answer
296 views

What, precisely, are the criteria for determining if a relay will be flagged as a guard?

The Tor FAQ's "What are Entry Guards?" entry does not describe the process by which a relay becomes a guard. The word "flag" is not mentioned anywhere in the FAQ index. Arma's "The lifecycle of a ...
3
votes
2answers
512 views

How is the weighted fractional uptime of a Tor relay calculated?

How is the weighted fractional uptime of a Tor relay calculated? Arma's "The lifecycle of a new relay" post mentions this statistic but does not describe it in detail: Directory authorities assign ...

15 30 50 per page