All Questions

Filter by
Sorted by
Tagged with
3
votes
2answers
180 views

What are the threat differences to accessing hidden services compared to the regular internet over Tor?

I understand many of the possible attacks against a user visiting a regular website over Tor but I am wondering, what are the potential attacks to identify a connection between a user and a hidden ...
10
votes
4answers
309 views

Where in the world does Tor provide the highest degree of anonymity?

As we know, Tor hides users amongst the other users on the network, so the more populous and diverse the user base for Tor is, the more everybody's anonymity will be protected. So, in which part of ...
2
votes
1answer
2k views

How does onion routing work? [duplicate]

How does onion routing work? How would it be explained to someone who has a basic understanding of networking?
9
votes
2answers
2k views

Should I choose a new guard if the network is overloaded?

When I start the Tor Browser Bundle I sometimes see the message: Your Guard … is failing more circuits than usual. Most likely this means the Tor network is overloaded. If this one guard node is ...
5
votes
1answer
4k views

Does the Tor Browser Bundle cache relay information?

When I restart the Tor Browser Bundle shortly after I've closed it I have the impression that relay information load faster. So I assume that the information about running relays is cached somehow. Is ...
13
votes
4answers
913 views

Are short-lived relays useful to the Tor network?

I have some dedicated servers which are not used at the moment. However this can change on a weekly basis. Would it be useful to the Tor network for me to configure them as relays during the times ...
30
votes
5answers
29k views

How can I anonymize my SSH traffic using the Tor network?

I have a working installation of Tor. I am able to both access hidden services and proxy my clear-net traffic through Tor. My main source of traffic so far has been HTTP. I would like to know how I ...
3
votes
1answer
64 views

Is there a list of applications which are know to leak or not to leak information when using with Tor?

Some applications can either leak sensitive information through the Tor channel or they can make communication outside of the Tor channel which could lead to identification of your computer in the Tor ...
21
votes
3answers
1k views

How to prevent the Mevade botnet from abusing the Tor network?

If the botnet admin decides to transmit data, maybe he alone could bring down the whole Tor network. The NTor circuit-level handshake in Tor 0.2.4 solved some problems, but the botnet is still ...
24
votes
3answers
9k views

How does a Tor client pick Tor nodes for circuit creation?

A Tor client initially contacts Directory Authorities to fetch the consensus (i.e. a file containing all relays of the Tor network at that time with details such as IP address, exit policy, public key ...
7
votes
4answers
470 views

How to detect tampering with Tor binaries downloaded from unofficial sources?

If I've download a Tor binary from an unofficial source is there a way to verify that the binaries haven't been tampered with?
15
votes
2answers
1k views

Does Tor insert random delays or perform packet re-ordering to make the discovery of the communication path harder?

If an attacker can observe the Tor user, and the website being visited, it is possible to correlate the traffic by looking at time and size distributions of the communication. Techniques such as ...
16
votes
4answers
9k views

Is it possible to make the Tor onion-routing path longer?

By default, Tor uses an onion-routing path with three hops: entry, relay (middle) and exit. Is it possible to configure (or, if necessary, recompile) Tor to use more than three hops? This would lessen ...
13
votes
2answers
475 views

Are there trustworthy third-party audits of the Tor source code?

Was the Tor source code trustworthily audited by a third party to check if it does not contain a back-door? Are such audit results freely available?
18
votes
7answers
25k views

Can Tor be used with applications other than Web browsers?

From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc? (Please explain ...
26
votes
4answers
41k views

Should I run Tor in a VM?

I've heard advice that to further protect my anonymity/privacy it's best to run Tor (the Tor Browser Bundle) in a Virtual Machine, which you would ideally roll back after each use. What extra ...
13
votes
3answers
803 views

Are there any vulnerabilities in the process of onion routing?

In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
22
votes
2answers
920 views

How can I prevent my different activities carried out over Tor being linked?

I know there are potential risks of carrying out multiple activities over Tor at the same time, when I don't want them to be linked. For example, I might browse one website giving one pseudonym, then ...
16
votes
3answers
10k views

Can I detect when someone is connecting to my server via Tor?

I run a web server. Can I distinguish between traffic that has been routed via Tor and that which hasn't?
15
votes
2answers
1k views

Is Tor's security compromised if other services are connecting in the clear?

I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't ...
15
votes
3answers
2k views

Can government agencies track what sites I'm visiting when using Tor?

Can agencies such as the NSA or GCHQ track what websites I'm visiting if I'm using the Tor Browser Bundle? What about hidden services?
8
votes
2answers
5k views

How do I create a launcher / script that opens an URL in TorBrowser (from the bundle)

If I do tor-browser_en-US/App/Firefox/firefox-bin http://example.com it opens in my regular Firefox browser. Is there a way to make a launcher/script that opens a link in the Tor Browser?
25
votes
3answers
15k views

My ISP/Network/Government has blocked access to the TorProject website. How can I download Tor?

I'm trying to download Tor but my ISP/Network administrator/Government has blocked access to the TorProject website. How do I download Tor?
17
votes
2answers
7k views

How can I install Tor from the source code in the Git repository?

It is sometimes desirable to compile Tor from source, and perhaps run an unreleased version (e.g., to test the latest changes, use new features unavailable in the latest release, etc.). What is the ...
1
vote
2answers
150 views

How does Tor pass my traffic around and should I be worried about malicious relay operators? [closed]

I am not sure how does Tor work, how safe is it as I heard that some relays are ran by bad people or government agencies.
2
votes
0answers
138 views

How do torrent clients over Tor affect the network? [duplicate]

This blog post from a few years ago, suggests that: The first answer is "don't run Bittorrent over Tor". We've been saying for years not to run Bittorrent over Tor, because the Tor network can't ...
46
votes
7answers
112k views

How can BitTorrent traffic be anonymized with Tor?

This blog post from a few years ago suggests that using BitTorrent services over Tor is a bad idea for multiple reasons. However, it also suggests some fixes to get over these problems. Is using a ...
14
votes
1answer
951 views

Is it safe to run an entry node server?

After some research, I found that there are mostly relay (middle) nodes, and less exit and entry nodes. But why? The connection from the client to the entry node is encrypted, so there should be no ...
23
votes
5answers
9k views

Securely hosting a Tor hidden service/site

There are some detailed instructions for setting up a Tor site at torproject.org1. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that ...
19
votes
2answers
2k views

How can I switch from one Tor Browser Bundle version to another? [closed]

I'm trying to use the Tor Browser Bundle (TBB) for everyday surfing. For convenience reasons I use bookmarks and sometimes install some addons. When a new version of the TBB comes out, I lose all of ...
12
votes
1answer
2k views

How can I use Chrome through Tor on OS X? [closed]

How do I properly set up Chrome on my Mac OS X machine to run all traffic through the Tor network when the Tor network is running? Chrome Version: 29.0.1547.76 Mac OS X Version: 10.8.5 Tor: 0.2.3....
13
votes
5answers
3k views

Aside from disabling Javascript in Firefox, how can I make Tor Browser Bundle more secure?

In a recent Tor security advisory, Roger Dingledine writes: Consider disabling JavaScript (click the blue "S" beside the green onion, and select "Forbid Scripts Globally"). Disabling ...
8
votes
4answers
1k views

How can I configure my network so that when Tor is running no other traffic can leave the box?

One of the fundamentals of Tor is that it can only really hide you if, when Tor is enabled and in use, you're using it exclusively. Agents wishing to de-anonymize you can examine requests to ...
2
votes
0answers
128 views

Are there any good practices to keep my Tor relay's private key safe? [closed]

Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe? We can take for granted that software packages constantly ...
4
votes
1answer
99 views

Why does my Tor Cloud bridge receive more traffic than it sends?

I am running a Tor Cloud EC2 instance. From the log files, it looks like it receives more traffic than it sends. What causes this?
6
votes
1answer
3k views

What threat model is Qubes OS TorVM most appropriate for?

Why would someone want to use Tor through a TorVM in Qubes, compared to other approaches? This page compares TorVM to Whonix, Tails, and Tor Browser but doesn't come to a firm conclusion as to which ...
4
votes
1answer
2k views

Which Tor Browser settings can leak my IP address when changed? [closed]

Are there Tor Browser settings that, when changed, can lead to my IP address being leaked?
11
votes
2answers
414 views

How can I prevent someone looking at my traffic patterns from learning that I use Tor?

Traffic pattern recognition can apparently be used to achieve a high degree of confidence of the origin of certain traffic, based on statistical analysis of exit node traffic. Is it possible to ...
26
votes
2answers
2k views

How strong is the anonymity of a hidden service compared to an average Tor client? How much easier is it to learn the Hidden Service's IP address?

Another way of putting this: How hard would it be to de-anonymize a hidden service? By "de-anonymize" I mean revealing the IP address of whatever server the hidden service is hosted on. Of course, ...
7
votes
1answer
1k views

How do I use Tor Browser with Qubes TorVM?

I want to run Tor Browser, without the bundled Tor, using Qubes TorVM. Let's assume I have already got Qubes OS running. The TorVM documentation states under Future Work: "Create Tor Browser packages ...
14
votes
2answers
2k views

How does Tor's threat model differ from i2p's threat model?

I2P is an alternative anonymity system, with a very different design - it focuses more on intra-I2P communication, rather than communication with the wider internet. Unlike Tor, every user of I2P is ...
11
votes
3answers
1k views

How can I test an application for proxy leaks?

If I have an application that supports a SOCKS proxy, and I point it at a running Tor instance, how can I be sure that all traffic the application sends (including DNS requests) are sent through the ...
9
votes
2answers
2k views

How are 'Pluggable Transport' bundles different from 'regular' Tor Browser Bundles?

The Tor Project releases both Tor Browser Bundles, and Pluggable Transport Tor Browser Bundles. How are these different? How should I decide which bundle to use?
37
votes
6answers
5k views

Can a hidden service be hosted by multiple instances of Tor?

Is it possible for multiple Tor clients, running on different machines or even networks, to publish the same Tor hidden service using the same private key to load balance requests between them?
12
votes
2answers
639 views

How should one explain Tor to a non-technical audience?

How should I explain the operation of Tor to a reasonably-intelligent but non-technical audience? I'm looking for a way to introduce folks to Tor in a way that helps them to understand its basic ...
18
votes
2answers
2k views

How do Hidden Services get .onion domains that aren't random?

Hidden Services usually have a long-ish string of alphanumeric characters for their .onion address, and this is generated by Tor as part of the Hidden Service Configuration. How did some Hidden ...
10
votes
1answer
2k views

What are the minimum requirements for running a relay?

If I want to create a bunch of Tor relays running Linux with various VPS providers and want to save on cost, what is the minimum hardware config that I can get away with while still effectively ...
44
votes
3answers
46k views

How does Tor route DNS requests?

Tor can only handle TCP connections, but DNS is a UDP protocol. How does Tor route DNS requests over its TCP based network? Why can the same approach not be used to route all UDP traffic over Tor?
8
votes
2answers
2k views

What implementations of Tor are there?

I have seen implementations such as the Tor Browser Bundle and a TorChat, based on the Tor network. I was wondering if there were any more of them out there?
1
vote
2answers
1k views

What impact does Tor's bootstrapping process have for attack models?

As I understand it, Tor nodes and clients bootstrap themselves by contacting over the regular internet some hard-coded addresses to get basic network information. What are the effects of this design ...

15 30 50 per page