7
votes
Accepted
Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?
No, the HS directory is accessed via Tor. See: https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549
The nodes running HS directories do form a distributed hash table, though it's not ...
- 507
6
votes
Does my ISP know what sites I have visited if I am using Tor?
Actually you need to run Tor as a router, only then you'll never leak a DNS info, but there's also a trick with persistent cookies: if you've visited some sites from your PC before going through Tor ...
- 5,401
6
votes
Securely hosting a Tor hidden service/site
Interesting discussion points thus far.
Use VMs as discussed. I prefer VMware because of the networking, cloning, console access, replication, etc. No need for an OSS hypervisor discussion. ...
- 61
6
votes
What is the best way to hide Tor usage?
I assume you would like to hide the Tor usage from your ISP and/or people in charge of internet censorship where you live and use internet. If thats the case you have some options.
Option 1.
You may ...
- 3,236
6
votes
Accepted
Can I track other users on Tor?
You can tell that they use Tor, but not what they do on Tor. Not from sniffing the network alone.
If you own the machines they use, you could install software on it that tells you what they do, ...
- 3,745
6
votes
Accepted
Tor Warning Against Maximizing Window
Well thats true, but the Window Size is not the only thing which can be tracked and will be tracked. The Windows size alone will not identify you.
But tracking nowadays is not only done by cookies ...
- 180
6
votes
Accepted
How do Google servers discriminate anonymous users?
Error 403 and CAPTCHA are appearing because the exit node you're using is not dedicated to you only: Many people are using it, including to access Google and other services.
It seems - on a website ...
- 5,401
5
votes
How can BitTorrent traffic be anonymized with Tor?
Sending Torrent traffic over Tor is a bad idea for three main reasons:
It doesn't make you anonymous. Torrent protocol wasn't designed with anonymity in mind and there are a million ways you're going ...
- 2,742
5
votes
RDP over Tor - safe?
Wikipedia says:
The RDP protocol in its default configuration is vulnerable to a man-in-the-middle attack. Administrators can enable transport layer encryption to mitigate this risk.
RDS over TLS ...
- 155
5
votes
Can technicians track my computer which has an image on it if I use Tor?
If you use Tails, then if they've installed software, it won't run while you use Tails. If you download Tails using a different computer, they won't know you downloaded it at all.
You can also use a ...
- 185
5
votes
How can I use Tor without my ISP knowing?
There is no long term credible way to deny the ISP provider from figuring out you are using Tor. You may use bridges or pluggable transport bridges to temporarily deny ISP from knowing that you are ...
- 3,236
5
votes
Releasing a controversial movie torrent using Tor Network for security
Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking,...
- 2,989
5
votes
OpenWRT - route all the traffic through Tor
The documentation for this setup on the Tor project website is excellent:
https://trac.torproject.org/projects/tor/wiki/doc/OpenWRT
Since you have OpenWRT installed already you can skip ahead a few ...
- 350
5
votes
Accepted
Why does Tor publish IP addresses of exit nodes?
The list of all Tor relays and whether they are exits needs to be public, because Tor clients use this information to build circuits.
There is no point in trying to keep this information 'secret' ...
- 3,745
5
votes
Does windows 10 compromise TOR?
Windows 10 has a keylogger embedded, thus all the words, codes, psws that user insert using keyboard could be sent to Windows Servers and to authorities per request.
Does it mean we should use "on ...
- 163
5
votes
Is tor still as safe as it was before the takedown of Silk Road?
Not a tor exploit, or hijacked exit node.
The tor project has a long post about this:
https://blog.torproject.org/blog/tor-and-silk-road-takedown
In this case we've been watching carefully to try to ...
- 1,863
5
votes
Accepted
What encryption algorithms does Tor use?
What encryption algorithms does Tor use?
See the following sections of the Tor Protocol Specification:
0.2 Security parameters
0.3 Ciphers
Isn't RSA 1024 considered weak?
1024 hasn't been broken ...
- 3,105
5
votes
How can website server recognize incoming Tor or VPN connection?
The list of exit nodes is well known so it's trivial for any system to look up into that list and see if any incoming connection comes from any of them.
- 151
5
votes
Internet censored (Kazakhstan)
Use Pluggable Transports.
Choose Configure (or accessed under the Green Onion Menu -> Tor Network Settings)
Choose 'My ISP block connections...'.
Choose obfs4, meek-azure or meek-amazon.
Select Okay.
...
- 10.8k
5
votes
Accepted
Is Tor completely anonymous?
This setup may, or may not, be completely anonymous, depending on a whole bunch of factors, some extremely subtle. Adding a VPN to Tor basically never improves anonymity, though. Exactly how someone ...
- 552
4
votes
Accepted
What does "[Warning] Rejecting SOCKS request for anonymous connection to private address [scrubbed]." means?
It's fixed for bug #10419. Instead of a proper fix it "routes" localhost over Tor. See
https://trac.torproject.org/projects/tor/ticket/10419#comment:32
- 56
4
votes
Securely hosting a Tor hidden service/site
Since mirimir already mentioned running tor and webserver on seperate computers, I will mention that Whonix is a great Debian-based GNU/Linux build for anonymity of users and servers. Also, having a ...
4
votes
Can Tor be used with applications other than Web browsers?
Applications that support SOCKS
As mentioned by @zhenech any application that supports SOCKS can be used with Tor.
Here are few examples that show your IP changing via an IP identifying website:
...
4
votes
Is it safe to send identifying information unencrypted through Tor?
You need to accept that all things flowing through an exit node are most likely analyzed by big brother government. Everything you send must keep your anonymity. If you are deploying sensitive ...
- 41
4
votes
What are advantages and disadvantages of Tor with respect to JonDonym?
JonDonym and Tor differ greatly in both design and implementation. First, JonDonym is a mix network, whereas Tor is an onion-routing network. Quoting Syverson (2009) Why I'm not an Entropist:
Mix ...
- 2,989
4
votes
Accepted
What are advantages and disadvantages of Tor with respect to JonDonym?
JonDo now accepts Bitcoins for premium accounts...
Anonymous payments for JonDonym premium accounts are possible by Paysafecard (Euro, Dollar) and by snake mail letter too. See "Available billing ...
- 56
4
votes
Accepted
Does using Email to send bridges and pluggable transport bridges hinder anonymity?
This is rather a non issue, I think. People typically use bridges when their Internet uplink (ISP, university, employer, etc.) blocks access to known entry guards. This may be part of national policy, ...
- 2,989
4
votes
Can technicians track my computer which has an image on it if I use Tor?
Short answer: Yes
Long answer: It is not possible to locate a single computer in the midst of the internet just by knowing its serial number or properties like the computer name. However, they can ...
- 151
4
votes
Is it safe to resize Tor Browser window with JavaScript disabled completely?
CSS can also measure your window width and height and send it back to the server. See the demo here:
https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html
Only top scored, non community-wiki answers of a minimum length are eligible