Hot answers tagged

6

The short answer is no. Basically, Tor is susceptible to timing correlation attacks, where someone who is observing the connection going from your client (OP) to the Tor network and also the connection from the Tor network to your destination can tell with fairly high certainty that they are the same connection. Note that you would need to correlate data ...


5

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking, so recommending that people download via Tor would put them at risk. And even if torrent clients are properly configured, they would be stealing bandwidth ...


5

Linostar's answer is on the right track, but missed the Tor version you specified. You should update to at least the 0.2.5.x series for Tor to try and detect out of memory situations and handle them smartly. I'd suggest upgrading to either 0.2.5.x or even 0.2.6.x if you don't mind an alpha to se what happens.


4

You need to accept that all things flowing through an exit node are most likely analyzed by big brother government. Everything you send must keep your anonymity. If you are deploying sensitive information, you need to use encryption.


4

I believe it is possible, but don't know if required tools already exist that anyone could use with low technical skills. This answer will cover both traffic correlation and timing attack issues. My idea is, you must somehow be able to use some computer in the middle anonymously and send it commands to perform anonymous tasks on scheduled dates and times, ...


4

To manually set an entry node see the following FAQ entry: Can I control which nodes (or country) are used for entry/exit? Yes. You can set preferred entry and exit nodes as well as inform Tor which nodes you do not want to use. The following options can be added to your config file "torrc" or specified on the command line: EntryNodes $...


4

While I don't have an expert answer, I can draft some thoughts on your first question. To estimate one's security level you have to define what your adversaries' capabilities are (technical skills, financial power, time and number of men), plus other factors (why would they spend their resources on targeting you, ...). That will form your threat model. ...


4

This is an ongoing attack on the Tor network. A group has established ~3000 relays (and growing), ~50% of network nodes (note, network nodes, not network capacity for which I don't have a decent measurement, but which is much smaller). However, as all of their nodes are fairly new, and some are being blocked by the directory authorities [1], the probability ...


4

Lizard Squad was a pretty noisy sybil. We have monitoring for events of that sort... https://gitweb.torproject.org/doctor.git/tree/sybil_checker.py Naturally that event has sparked interest in more sophisticated sybil detection... https://lists.torproject.org/pipermail/tor-dev/2015-January/008156.html https://lists.torproject.org/pipermail/tor-dev/2015-...


3

Exit relays will continue reading until circuit dies (in old versions) or buffer of a relay becomes too big (in new versions, intended to prevent DoS) . If you are a 'honest' client, the exit node will only make 1000 cells and then stop reading due to the hard-coded 1000-cell limit on sending window. So yes, it basically depends on something to the circuit ...


3

Yes, your privacy will be compromised. Please, don't ever rely on unencrypted protocols. This is also true when not using Tor. Your message will not be read. Also the E-Mail header (sender address, used mail software (usually containing version and operating system) etc.) might identify you, just like your style of writing. Your use case sounds like it isn'...


3

What prevents a directory server from being dishonest and give malicious data to the user? The information served by the directories is generated by reaching a consensus between the authorities. You would have to control the majority of the authorities to manipulate the consensus. This should be fairly hard as they are neither under the control of one ...


3

No, and yes. Facebook, hidden services, and https certs had talked on this. Facebook in fact brute forced only the first 40 bits and then made a backronym. Their hidden service name is "facebookcorewwwi.onion". For a hash of a public key, that sure doesn't look random. Many people have been wondering how they brute forced the entire name. The ...


2

It is possible that the malware has infected the computer's BIOS or other firmware and then any usage of that machine is compromised. If you boot from a CDROM with a burned copy of Tails, you should be safe from any malware that remains on the disk and/or is dependant on non-Linux operating systems.


2

Tor does not include any use of noise in any way. It also does not use any delays as those would not help much and would not be tolerated by applications and users. The concern is end-to-end traffic correlation, where the adversary can see the traffic flowing into the Tor network and out of it. This has not to happen at the entry and exit node, just any way ...


2

Is there any other serious obstacle for such attacks over Tor? Many services will automatically block exit nodes, or will be more strict with detecting possible attacks from exit nodes. Even if they are not blocked now, they will be blocked in the future once an attack occurs, screwing over both the attacker and innocent Tor users. Are there known cases ...


2

You know that some rogue entry node isn't faking Tor circuits because your Tor client specifies the relays used in each circuit, and because the circuit-creation process requires that each relay demonstrate that it possesses the proper private key. In order to mount such an attack, an adversary would need to compromise most Tor relays, in order to get their ...


2

I know this isn't exactly what you asked for, but because Bittorrent over Tor isn't considered the best thing to to there are other options. Depending on what you mean by "movie", another option might be to upload it directly to various leaking platforms. Most of them support a secure way to upload videos to the press directly. You may even want to upload ...


2

At Tor blog they say it is not good idea to seed via Tor network. I think best bet of yours would be using Tor browser to contact anonymously someone from non-standard country to seed the torrent for you. You reward him by doing some service in exchange or paying him using cryptocurrency account created over tor network and source funds would be anonymized ...


2

Yes, the exit relay can do any of the behaviors you describe. It can modify the data that comes back from the website (or whatever the destination is), or it can simply pretend to be the destination and send you whatever it wants to. It can also send other Tor cells, like padding cells, if it wants. Applications like Firefox rely on end-to-end encryption (...


2

Packets won't carry your local time information, application data will though. You probably want to make your timezone UTC since this is the most "generic" timezone and the easiest to calculate your own local time from (since timezones are measured as offsets from UTC). Random timezones are probably counter productive, because some timezones will have ...


2

I don't think anyone will do your research for you but here are some links with a lot of good information. Paul Syverson's home page Roger Dingledine's home page 2012 Tor Specification Selected Papers in Anonymity


2

Yes, the exit node can inspect and tamper with the TCP traffic as it leaves the network. It's impossible for Tor to provide integrity for this traffic. You should always use secure protocols like TLS/HTTPS over Tor (and even when using the Internet outside of Tor).


1

Free VPN is an option for you. There is no money trail and you do not need to fund VPN usage. You may encounter volume limitation since you need 5GB usage volume, but this can be overcome by dividing your file to as many parts as you wish, and use different free VPN to load each part. This may improve your anonymity and security. However, make sure all free ...


1

If there are not enough directory authorities online for a consensus, the network will die out as the consensus expires. If no directory authorities are online, new clients are unable to download an initial list of relays. If an adversary has control over a majority of directory authorities, they could force a consensus of their liking, for example one that ...


Only top voted, non community-wiki answers of a minimum length are eligible