Hot answers tagged

5 votes

Releasing a controversial movie torrent using Tor Network for security

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking,...
user avatar
  • 2,989
5 votes
Accepted

Tor dying on Raspberry Pi (circuit creation storm, out of memory)

Linostar's answer is on the right track, but missed the Tor version you specified. You should update to at least the 0.2.5.x series for Tor to try and detect out of memory situations and handle them ...
user avatar
  • 2,209
4 votes

How to tell my Tor Browser to use a certain relay as entry point?

To manually set an entry node see the following FAQ entry: Can I control which nodes (or country) are used for entry/exit? Yes. You can set preferred entry and exit nodes as well as inform Tor ...
user avatar
  • 3,730
4 votes
Accepted

How to tell my Tor Browser to use a certain relay as entry point?

While I don't have an expert answer, I can draft some thoughts on your first question. To estimate one's security level you have to define what your adversaries' capabilities are (technical skills, ...
user avatar
4 votes

Is it safe to send identifying information unencrypted through Tor?

You need to accept that all things flowing through an exit node are most likely analyzed by big brother government. Everything you send must keep your anonymity. If you are deploying sensitive ...
user avatar
4 votes

On Dec 26 2014 the number of relays have increased from 6700 range to 10000 range overnight. What is going on?

This is an ongoing attack on the Tor network. A group has established ~3000 relays (and growing), ~50% of network nodes (note, network nodes, not network capacity for which I don't have a decent ...
user avatar
  • 3,730
4 votes
Accepted

How does Tor defend against Sybil attacks?

Lizard Squad was a pretty noisy sybil. We have monitoring for events of that sort... https://gitweb.torproject.org/doctor.git/tree/sybil_checker.py Naturally that event has sparked interest in more ...
user avatar
  • 691
3 votes
Accepted

Is it safe to send identifying information unencrypted through Tor?

Yes, your privacy will be compromised. Please, don't ever rely on unencrypted protocols. This is also true when not using Tor. Your message will not be read. Also the E-Mail header (sender address, ...
user avatar
  • 1,182
3 votes

Relay streaming a large file

Exit relays will continue reading until circuit dies (in old versions) or buffer of a relay becomes too big (in new versions, intended to prevent DoS) . If you are a 'honest' client, the exit node ...
user avatar
  • 725
3 votes
Accepted

What prevents directory server from being attacked?

What prevents a directory server from being dishonest and give malicious data to the user? The information served by the directories is generated by reaching a consensus between the authorities. You ...
user avatar
  • 1,342
3 votes

Does facebook's hidden service url mean that collisions are feasible?

No, and yes. Facebook, hidden services, and https certs had talked on this. Facebook in fact brute forced only the first 40 bits and then made a backronym. Their hidden service name is "...
user avatar
  • 725
2 votes

Are low bandwidth DoS attacks performed over the Tor network a problem to be considered?

Is there any other serious obstacle for such attacks over Tor? Many services will automatically block exit nodes, or will be more strict with detecting possible attacks from exit nodes. Even if they ...
user avatar
  • 21
2 votes

Releasing a controversial movie torrent using Tor Network for security

I know this isn't exactly what you asked for, but because Bittorrent over Tor isn't considered the best thing to to there are other options. Depending on what you mean by "movie", another option ...
user avatar
  • 1,182
2 votes

Releasing a controversial movie torrent using Tor Network for security

At Tor blog they say it is not good idea to seed via Tor network. I think best bet of yours would be using Tor browser to contact anonymously someone from non-standard country to seed the torrent for ...
user avatar
  • 141
2 votes
Accepted

How to prevent a rogue Tor entry node?

You know that some rogue entry node isn't faking Tor circuits because your Tor client specifies the relays used in each circuit, and because the circuit-creation process requires that each relay ...
user avatar
  • 2,989
2 votes

Is exit node able to modify / add packets to a stream?

Yes, the exit relay can do any of the behaviors you describe. It can modify the data that comes back from the website (or whatever the destination is), or it can simply pretend to be the destination ...
user avatar
2 votes

Whonix Workstation Country Code

Packets won't carry your local time information, application data will though. You probably want to make your timezone UTC since this is the most "generic" timezone and the easiest to calculate your ...
user avatar
  • 10.8k
2 votes
Accepted

List of attacks on Tor

I don't think anyone will do your research for you but here are some links with a lot of good information. Paul Syverson's home page Roger Dingledine's home page 2012 Tor Specification Selected ...
user avatar
  • 2,141
2 votes
Accepted

Can Tor connection be intercepted/tampered by exit nodes?

Yes, the exit node can inspect and tamper with the TCP traffic as it leaves the network. It's impossible for Tor to provide integrity for this traffic. You should always use secure protocols like TLS/...
user avatar
  • 2,628
1 vote

Tor dying on Raspberry Pi (circuit creation storm, out of memory)

It may or may not be an attack, but my personal opinion is that Tor isn't guessing the right values for some parameters like MaxMemInQueues (like it was setting them too high, then too low later). Try ...
user avatar
  • 1,195
1 vote

Is exit node able to modify / add packets to a stream?

An exit node can not initiate a stream to a client or on behalf of a client. Only clients can initiate streams. Once a client has established a stream, if the service is plaintext, the exit node can ...
user avatar
  • 3,745
1 vote

Ready-made Tor relay on virtual machine

Do you mean relays or clients with browsers? Your mention of users and screens and browsers suggests the latter. The question you link to is also about Tor Browser, not relays. A ready-made Tor ...
user avatar
  • 3,745
1 vote

What would happen if directory authorities were compromised or taken down?

If there are not enough directory authorities online for a consensus, the network will die out as the consensus expires. If no directory authorities are online, new clients are unable to download an ...
user avatar
  • 3,745
1 vote

Warning!!! Many of directory authorities are compromised and taken down, This is a horrendous security risk, Who has done it and why?

This was announced / predicted a few days ago on the Tor blog: Possible upcoming attempts to disable the Tor network The Tor Project has learned that there may be an attempt to incapacitate our ...
user avatar
  • 3,745
1 vote
Accepted

How Guard Discovery attack in Tor network works?

Since each hidden service keeps a list of guard nodes, revealing the guards gives the attacker the next point of attack. Since both hidden services and guard nodes are valid for a long time (more than ...
user avatar
  • 708

Only top scored, non community-wiki answers of a minimum length are eligible