Hot answers tagged

6 votes

Security of Tor bridges and Captcha

Any captcha system can be broken by paying people. The captcha has been attacked in the past by a nationstate adversary. The captcha isn't critical to the security of Tor, it does present problems ...
cacahuatl's user avatar
  • 10.9k
5 votes

problem with obfs4proxy and apparmor (solved)

In your torrc there is the line ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy --managed Furthermoer the log file states: Jun 08 21:33:05.000 [warn] Could not launch managed proxy ...
Jens Kubieziel's user avatar
  • 8,561
5 votes

find needed details of my own private obfs4 Tor bridge

From the obfs4proxy README: The autogenerated obfs4 bridge parameters are placed in DataDir/pt_state/obfs4_state.json. To ease deployment, the client side bridge line is written to DataDir/...
cacahuatl's user avatar
  • 10.9k
5 votes

Failed to connect to Tor network?

The first warning in the logs is this: 11/6/2015 7:05:53 AM.400 [WARN] Our clock is 1 days, 21 hours, 54 minutes behind the time published in the consensus network status document (2015-11-08 10:00:...
Richard Horrocks's user avatar
4 votes

How does Tor client build circuits when using a bridge?

Yes, they are taken from the bridge. Every bridge has the latest directory information cached (just like any directory mirror), and Tor clients fetch them directly and build circuits with the bridge ...
nobody's user avatar
  • 725
4 votes
Accepted

Anyway to run a meek bridge on a php hosting?

You can rewrite meek in php. But it's too complicated. There is a simple way to run a relay, just function like a meek server. Here are code: https://gitweb.torproject.org/pluggable-transports/meek....
Kurobane's user avatar
3 votes
Accepted

tor relay and bridge on one server with two IP addresses

You'd need to run two Tor instances, one for the published relay and the other for the bridge. The important part will be in specifying the correct IP address to bind to and listen on for the ...
cacahuatl's user avatar
  • 10.9k
3 votes

Tails 3.0 blocks connection to ANY obfs4 bridge

Make sure your time zone and time settings are correct, if your system clock time is off, obfs4 will fail to connect. Tails automatically synchronize time upon start, but sometimes the time ...
Annon35's user avatar
  • 85
2 votes
Accepted

How to configure IPv6-enabled bridge?

There are no IPv6-specific stuff in torrc, but make sure to check all theese points : You're running a system with IPv6 functionality enabled You have compiled all the pre-requisites of Tor and the ...
Alexey Vesnin's user avatar
  • 5,900
2 votes

How to access "Configure" page to set up bridge relay

If a site is banning 'you' (they actually ban all Tor exit nodes) then using bridges will not help you. Bridges are an alternative way to enter the Tor network, which can be useful if your ISP ...
Jobiwan's user avatar
  • 3,665
2 votes
Accepted

Does eduroam block tor?

The problem is likely caused by the institution you are connecting to, and not eduroam. I have never used eduroam (nor heard of it before this post), but after viewing their documentation it appears ...
N10's user avatar
  • 96
2 votes

Stuck at "Establishing an encrypted directory connection"

It seems that you may be a victim of TLS/HTTPS MitM-attack, try to use Meek and Obfs3/4 pluggable transports. If it won't work either - please post your Tor log here, so I'll be able to help you ...
Alexey Vesnin's user avatar
  • 5,900
2 votes

Get Tor bridges via email

COMMANDs: (combine COMMANDs to specify multiple options simultaneously) get bridges Request vanilla bridges. get transport [TYPE] Request a Pluggable Transport by TYPE. get help ...
Kamran salehi's user avatar
2 votes
Accepted

Bridges - How to prevent a big adversary to learn all bridges

It works, and exactly like this! To learn published bridges you need : A working Perl + some modules(email-related) A working list of emails OR a script to create ones A...Tor client(!!!) for making ...
Alexey Vesnin's user avatar
  • 5,900
2 votes

arm for windows?

No, arm is not available for Windows unless you use Cygwin (ticket).
Damian's user avatar
  • 681
2 votes
Accepted

How can I debug Tor connections to see where obfs4 fails?

You can edit your ClientTransportPlugin or ServerTransportPlugin for obfs4proxy to include a -logLevel followed by one of ERROR,WARN,INFO, or DEBUG, an -enableLogging=true flag to enable logging, and ...
cacahuatl's user avatar
  • 10.9k
2 votes
Accepted

What's keeping [insert dictatorship here] from blocking all bridges after first use?

China has already been doing this for some time. Anyone who runs a Tor relay will often receive inbound connections from some random residential looking IP address in China, often with some bizarre ...
cacahuatl's user avatar
  • 10.9k
2 votes

problem with obfs4proxy and apparmor (solved)

You could fix your problem with apparmor like this: First open /etc/apparmor.d/abstractions/tor with your favorite editor (with root user) sudo gedit /etc/apparmor.d/abstractions/tor Then change ...
Farbod Ahmadian's user avatar
2 votes
Accepted

How many custom bridges do I need?

According to this Tor project webpage: Tor will only use one bridge at a time, but it is good to add more than one bridge so you can continue using Tor even if your first bridge becomes unavailable....
m894v5n74v539nm8's user avatar
2 votes

Bridge to improve anonymity

Yes, having friends running private/unpublished bridge is a way to improve your anonymity, but here is a caveat : use a pluggable transport like obfs3/4 and use bridge key you obtain/give offline, i.e....
Alexey Vesnin's user avatar
  • 5,900
2 votes

Does all bridge users have the same encryption key?

Whenever your client makes a connection to a bridge or any other Tor relay it negotiates an individual key. So this key if different from a key which another client uses and also from a key which your ...
Jens Kubieziel's user avatar
  • 8,561
2 votes

Where can I find meek servers?

The meek servers are distributed with Tor Browser. The point of meek is to be difficult to censor not because the bridges are hard to find but because they're hard to distinguish from other traffic. ...
cacahuatl's user avatar
  • 10.9k
2 votes
Accepted

Mutliple "bridge" lines in torrc

It will try successive bridges until it is able to use one, starting with the first bridge listed in the torrc. So it can be helpful to use multiple bridge lines, incase one bridge goes down or is ...
cacahuatl's user avatar
  • 10.9k
2 votes
Accepted

Why isn't my tor starting?

You've appear to have specified ReachableAddresses which means that you've told Tor is can't reach certain destinations, those destinations include the bridges that you've been given so Tor is ...
cacahuatl's user avatar
  • 10.9k
2 votes

Configure Tor Browser to use a private Bridge

I think this is the documentation that you are looking for: https://www.torproject.org/docs/bridges Understanding A Bridge Configuration Line As an example, when you obtain a bridge from ...
NeverMine17's user avatar
2 votes
Accepted

Optimal configuration for an obfs4 bridge

What numbers to choose for OR and obfs4proxy ports? For an obfs4 bridge I'd recommend: Picking a low numbered port that's used by a common service for obfs4 (it takes a few extra steps to allow ...
cacahuatl's user avatar
  • 10.9k
2 votes

Is it possible to use meek bridges in orbot?

Yes, Orbot supports meek, specifically meek-lite provided by the obfs4proxy binary that's shipped with Orbot. When you enable bridges (swipe in left, and toggle the 'Bridges' slider to on) it will ...
cacahuatl's user avatar
  • 10.9k
2 votes

Can I operate a relay and Bridge on same computer?

You could run a relay and bridge on the same computer if you set up 2 instances of tor, but this should not be done. From the FAQ: ... ISPs or governments trying to block access to the Tor network ...
SuperSluether's user avatar
2 votes
Accepted

How to monitor traffic usage on a Tor bridge on Linux?

Take a look at Nyx. That is probably how most relay operators on Linux get their bandwidth and connection information.
Martin's user avatar
  • 181

Only top scored, non community-wiki answers of a minimum length are eligible