7 votes
Accepted

Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?

No, the HS directory is accessed via Tor. See: https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549 The nodes running HS directories do form a distributed hash table, though it's not ...
user avatar
6 votes

Does my ISP know what sites I have visited if I am using Tor?

Actually you need to run Tor as a router, only then you'll never leak a DNS info, but there's also a trick with persistent cookies: if you've visited some sites from your PC before going through Tor ...
user avatar
  • 5,401
6 votes

Securely hosting a Tor hidden service/site

Interesting discussion points thus far. Use VMs as discussed. I prefer VMware because of the networking, cloning, console access, replication, etc. No need for an OSS hypervisor discussion. ...
user avatar
  • 61
6 votes

What is the best way to hide Tor usage?

I assume you would like to hide the Tor usage from your ISP and/or people in charge of internet censorship where you live and use internet. If thats the case you have some options. Option 1. You may ...
user avatar
  • 3,236
6 votes
Accepted

Can I track other users on Tor?

You can tell that they use Tor, but not what they do on Tor. Not from sniffing the network alone. If you own the machines they use, you could install software on it that tells you what they do, ...
user avatar
  • 3,745
6 votes
Accepted

Tor Warning Against Maximizing Window

Well thats true, but the Window Size is not the only thing which can be tracked and will be tracked. The Windows size alone will not identify you. But tracking nowadays is not only done by cookies ...
user avatar
  • 180
6 votes
Accepted

How do Google servers discriminate anonymous users?

Error 403 and CAPTCHA are appearing because the exit node you're using is not dedicated to you only: Many people are using it, including to access Google and other services. It seems - on a website ...
user avatar
  • 5,401
5 votes

How can BitTorrent traffic be anonymized with Tor?

Sending Torrent traffic over Tor is a bad idea for three main reasons: It doesn't make you anonymous. Torrent protocol wasn't designed with anonymity in mind and there are a million ways you're going ...
user avatar
  • 2,742
5 votes

RDP over Tor - safe?

Wikipedia says: The RDP protocol in its default configuration is vulnerable to a man-in-the-middle attack. Administrators can enable transport layer encryption to mitigate this risk. RDS over TLS ...
user avatar
  • 155
5 votes

Can technicians track my computer which has an image on it if I use Tor?

If you use Tails, then if they've installed software, it won't run while you use Tails. If you download Tails using a different computer, they won't know you downloaded it at all. You can also use a ...
user avatar
  • 185
5 votes

How can I use Tor without my ISP knowing?

There is no long term credible way to deny the ISP provider from figuring out you are using Tor. You may use bridges or pluggable transport bridges to temporarily deny ISP from knowing that you are ...
user avatar
  • 3,236
5 votes

Releasing a controversial movie torrent using Tor Network for security

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking,...
user avatar
  • 2,989
5 votes

OpenWRT - route all the traffic through Tor

The documentation for this setup on the Tor project website is excellent: https://trac.torproject.org/projects/tor/wiki/doc/OpenWRT Since you have OpenWRT installed already you can skip ahead a few ...
user avatar
5 votes
Accepted

Why does Tor publish IP addresses of exit nodes?

The list of all Tor relays and whether they are exits needs to be public, because Tor clients use this information to build circuits. There is no point in trying to keep this information 'secret' ...
user avatar
  • 3,745
5 votes

Does windows 10 compromise TOR?

Windows 10 has a keylogger embedded, thus all the words, codes, psws that user insert using keyboard could be sent to Windows Servers and to authorities per request. Does it mean we should use "on ...
user avatar
  • 163
5 votes

Is tor still as safe as it was before the takedown of Silk Road?

Not a tor exploit, or hijacked exit node. The tor project has a long post about this: https://blog.torproject.org/blog/tor-and-silk-road-takedown In this case we've been watching carefully to try to ...
user avatar
  • 1,863
5 votes
Accepted

What encryption algorithms does Tor use?

What encryption algorithms does Tor use? See the following sections of the Tor Protocol Specification: 0.2 Security parameters 0.3 Ciphers Isn't RSA 1024 considered weak? 1024 hasn't been broken ...
user avatar
5 votes

How can website server recognize incoming Tor or VPN connection?

The list of exit nodes is well known so it's trivial for any system to look up into that list and see if any incoming connection comes from any of them.
user avatar
  • 151
5 votes

Internet censored (Kazakhstan)

Use Pluggable Transports. Choose Configure (or accessed under the Green Onion Menu -> Tor Network Settings) Choose 'My ISP block connections...'. Choose obfs4, meek-azure or meek-amazon. Select Okay. ...
user avatar
  • 10.8k
5 votes
Accepted

Is Tor completely anonymous?

This setup may, or may not, be completely anonymous, depending on a whole bunch of factors, some extremely subtle. Adding a VPN to Tor basically never improves anonymity, though. Exactly how someone ...
user avatar
  • 552
4 votes
Accepted

What does "[Warning] Rejecting SOCKS request for anonymous connection to private address [scrubbed]." means?

It's fixed for bug #10419. Instead of a proper fix it "routes" localhost over Tor. See https://trac.torproject.org/projects/tor/ticket/10419#comment:32
user avatar
4 votes

Securely hosting a Tor hidden service/site

Since mirimir already mentioned running tor and webserver on seperate computers, I will mention that Whonix is a great Debian-based GNU/Linux build for anonymity of users and servers. Also, having a ...
user avatar
4 votes

Can Tor be used with applications other than Web browsers?

Applications that support SOCKS As mentioned by @zhenech any application that supports SOCKS can be used with Tor. Here are few examples that show your IP changing via an IP identifying website: ...
user avatar
4 votes

Is it safe to send identifying information unencrypted through Tor?

You need to accept that all things flowing through an exit node are most likely analyzed by big brother government. Everything you send must keep your anonymity. If you are deploying sensitive ...
user avatar
4 votes

What are advantages and disadvantages of Tor with respect to JonDonym?

JonDonym and Tor differ greatly in both design and implementation. First, JonDonym is a mix network, whereas Tor is an onion-routing network. Quoting Syverson (2009) Why I'm not an Entropist: Mix ...
user avatar
  • 2,989
4 votes
Accepted

What are advantages and disadvantages of Tor with respect to JonDonym?

JonDo now accepts Bitcoins for premium accounts... Anonymous payments for JonDonym premium accounts are possible by Paysafecard (Euro, Dollar) and by snake mail letter too. See "Available billing ...
user avatar
  • 56
4 votes
Accepted

Does using Email to send bridges and pluggable transport bridges hinder anonymity?

This is rather a non issue, I think. People typically use bridges when their Internet uplink (ISP, university, employer, etc.) blocks access to known entry guards. This may be part of national policy, ...
user avatar
  • 2,989
4 votes

Can technicians track my computer which has an image on it if I use Tor?

Short answer: Yes Long answer: It is not possible to locate a single computer in the midst of the internet just by knowing its serial number or properties like the computer name. However, they can ...
user avatar
  • 151
4 votes

Is it safe to resize Tor Browser window with JavaScript disabled completely?

CSS can also measure your window width and height and send it back to the server. See the demo here: https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible