7 votes

How to change the entry node?

To actually answer your question, since nobody did that until now: shutdown Tor delete /tor/state file restart Tor In case you use TorBrowser on Windows the path is ...\Tor Browser\Browser\...
user136036's user avatar
7 votes
Accepted

What happens with TCP connections on SIGNAL NEWNYM?

Requesting a NEWNYM over the control port will tell Tor to consider the currently used circuits "dirty" (this normally happens after 10 minutes, with a few exceptions), at this point it will no longer ...
cacahuatl's user avatar
  • 11k
5 votes
Accepted

Does tor browser open a new circuit for each unique website?

In Tor Browser, every domain gets it's own circuit. The Design and Implementation of the Tor Browser document has some more details on it. Frankly, you get an own circuit for every domain shown in ...
Peter Gerber's user avatar
  • 1,342
4 votes

WARN: Failed to find node for hop 0 of our path. Discarding this circuit

Tor needs an accurate clock to work correctly. Please sync your time with an NTP (Network Time Protocol) server. Debian family On Debian based machines use package ntpdate. sudo ntpdate -v pool....
NeverMine17's user avatar
3 votes

Tor circuit selection

Yes you can. Settings in torrc: StrictNodes 1 ExcludeNodes {fr} Read more on how to configure your torrc file here.
james-see's user avatar
  • 344
3 votes

Can somebody force my Tor circuits to always start from his "guard node", to access my traffic?

Yes. An attacker can perform a sybil attack or just kick down your guard node repeatedly until your Tor client choose a malicious node as guard. Controlling your guard node doesn't lead to decrypting ...
nobody's user avatar
  • 725
3 votes

Is it possible to make a program that will use different circuit for each request? Even if the requests are parallel?

I don't think so, at least natively. Looking at the manual for Tor, it doesn't look like there is any kind of functionality built in that would allow you to do that. Theoretically, you could do ...
elmerjfudd's user avatar
  • 2,274
2 votes

Login to site.com, request "New Tor circuit for this site", site.com still recognizes original login

Requesting a new circuit will get you exactly that -- a new circuit. It does not mean that Tor won't pick the same exit again, and it will not clean any cookies. It is trivial then of course for a ...
mo.'s user avatar
  • 21
2 votes

What prevents CircID collision from happening?

There's a misunderstanding here. CREATE cells are sent just from immediate neighbours in a circuit, during circuit construction. So a client will send a CREATE cell to the entry node, where the ...
Sebastian's user avatar
  • 2,219
2 votes

Implementing the tor protocol, based on tor sources and a few clarifications

Step 7 is a TLS socket, not just raw TCP. "I created the onion hidden service, and i want to try make a http request to it", there are additional steps required for onion services which you'll know ...
cacahuatl's user avatar
  • 11k
2 votes

torsocks over torsocks? (by accident)

Torsocks sets the LD_PRELOAD environment variable to intercept a few system calls. It does not matter if you use it recursively: # at first $LD_PRELOAD is unset $ echo $LD_PRELOAD # when we start ...
Peter Gerber's user avatar
  • 1,342
2 votes

Does Tor choose nodes from nearby countries to create circuits?

No, Tor chooses nodes randomly. There are a lot of Tor nodes in Europe. So, you'll often see that your connections are using European nodes. (So does everybody else.)
Greg Hewgill's user avatar
2 votes

Why are entry nodes allowed to know that they are entry nodes?

The network doesn't make the distinction of entry relays. Any Tor client is allowed to use any relay for any hop of the circuit (except with restrictions on the exit relay). To limit the types of ...
Steve's user avatar
  • 3,132
2 votes
Accepted

Why can't a modified guard node compromise the network?

These types of attacks aren't possible in Tor because of Tor's ntor handshake and Tor's authenticated directory documents generated by the directory authorities. Tor clients download a trusted (and ...
Steve's user avatar
  • 3,132
2 votes

How TBB commands tor to use a "New Circuit for this Site"?

Short: it does not send a command. It creates new connection to SocksPort, using different credentials, and sends new requests to domain through it. Details: Tor do isolates streams to different ...
verb0's user avatar
  • 31
2 votes
Accepted

Determining circuit tor client is using

Tor clients keep a pool of circuits and may use several circuits simultaneously for streams depending on factors such as exit policies, stream isolation, etc. So there is generally not a single "...
Steve's user avatar
  • 3,132
2 votes
Accepted

understanding tor cell structure

In simple words: CircID serves the purpose to separate the circuits = onion 3-node chains. As it described in design - I'm citing: The header includes a circuit identifier (circID) that specifies ...
Alexey Vesnin's user avatar
  • 6,208
2 votes

Tor safe when taking future in to account?

Quantum threat is a real thing, especially in context of Shor's algorithm for a possible attack vector, for example. But there're a lot of quantum-resistant things like LWE and some EC's, so - using a ...
Alexey Vesnin's user avatar
  • 6,208
2 votes
Accepted

How do TOR nodes select the CircID's when creating, or extending, a circuit?

A circuit ID identifies a circuit on an OR connection. If this OR connection is between two relays, either relay can make new circuits on that OR connection. If a relay wants to create a new circuit, ...
Steve's user avatar
  • 3,132
1 vote
Accepted

customizing tor browser bundle

There is a project named: torflow and one of the plugins named OP-addon is a good solution for tor path generation and circuit handling with lots of measurements and analyzing goodies. from the ...
pouya's user avatar
  • 31
1 vote
Accepted

Why Tor doesn't support UDP?

Well, DNS queries are made via TCP - Tor does not use UDP at all, strictly speaking. The resolving query from the exit node - yes, it can be made through UDP protocol, but it's totally up to the ...
Alexey Vesnin's user avatar
  • 6,208
1 vote
Accepted

Signal NEWNYM vs Stream isolation

Can the server somehow learn the connection between Alice and Bob in 1. 2. and 3. alternative? Sort answer: 1. No. 2. Yes. 3. Yes. Long answer: A NEWNYM signal, among some administrative code, ...
nopara73's user avatar
  • 173
1 vote
Accepted

would torify use the same circuit as tbb when both are in operation?

No, Tor Browser isolates it's circuits by the first party domain. e.g. foo.com, bar.foo.com and qux.bar.foo.com will all be isolated on their own circuit for foo.com. While example.com, bar.example....
cacahuatl's user avatar
  • 11k
1 vote

Tor connection comparison inquiry

A full Tor circuit has 3 relays, a Guard, a Middle and an Exit. This keeps any single relay from knowing the full path which keeps the users identity separate from their activity. Onions connections ...
cacahuatl's user avatar
  • 11k
1 vote

"New Tor circuit for this site" does not work?

There is currently a bug with Tor Browser's New Circuit for this Site. The Tor Browser developers are aware of it and are working on a fix, a ticket for this bug already existed at #22538. (See this ...
cacahuatl's user avatar
  • 11k
1 vote
Accepted

Data saved in Onion Routers

No, unless 1) you could tap all Internet traffic between those relays (then what is the reason for hacking physically?) or 2) the bad guy is ignorant enough, livestreaming through Tor (using the same ...
nobody's user avatar
  • 725
1 vote
Accepted

OR Forward and reverse keys

One key exchange is performed, the shared secret is streched using a Key Derivation Function (KDF). From tor-spec: 5.1.3. The "TAP" handshake .... Once both parties have g^xy, they derive their ...
cacahuatl's user avatar
  • 11k
1 vote

Tor encryption combination

Tor uses RSA keys as identity keys (except for .onion services, for the time being). For exchanging secret key material Tor uses an ephemeral key exchange method, either TAP (old, DHE) or nTor (new, ...
cacahuatl's user avatar
  • 11k

Only top scored, non community-wiki answers of a minimum length are eligible