Hot answers tagged

7 votes
Accepted

What happens with TCP connections on SIGNAL NEWNYM?

Requesting a NEWNYM over the control port will tell Tor to consider the currently used circuits "dirty" (this normally happens after 10 minutes, with a few exceptions), at this point it will no longer ...
user avatar
  • 10.8k
6 votes

How to change the entry node?

To actually answer your question, since nobody did that until now: shutdown Tor delete /tor/state file restart Tor In case you use TorBrowser on Windows the path is ...\Tor Browser\Browser\...
user avatar
6 votes

How to change the entry node?

If you are looking to be able choose a specific entry nodes for specific period of time you may open the torrc and insert the following line: EntryNode $fingerprint On restart of Tor it will use the ...
user avatar
  • 3,236
5 votes

Can Tor's IP sharing be dangerous?

Regarding the question "Can you be arrested?", yes, you can be arrested all the time. In most countries you can be arrested for looking funny at a police officer. In most countries you will also be ...
user avatar
  • 183
5 votes
Accepted

Does tor browser open a new circuit for each unique website?

In Tor Browser, every domain gets it's own circuit. The Design and Implementation of the Tor Browser document has some more details on it. Frankly, you get an own circuit for every domain shown in ...
user avatar
  • 1,342
4 votes
Accepted

How to interpret the Circuit handshake stats?

Yes, that's correct. There are two types of circuit handshakes -- the original, called the Tor Authentication Protocol in Ian's paper about it: http://freehaven.net/anonbib/#tap:pet2006 and then the ...
user avatar
4 votes

How to change the entry node?

so I guess the entry node is limiting the traffic if you make too much traffic, right? No. The long guard rotation period is for security reasons. The more often you pick a new guard, the higher the ...
user avatar
  • 3,745
4 votes
Accepted

Accessing Tor hidden services over a single hop circuit

I think you want to check out the configure option for tor2web mode, which should do pretty much what you want. No special second instance running a tor relay would be necessary
user avatar
  • 2,209
4 votes
Accepted

What circuits connect to the introduction and rendezvous point?

Introduction and Rendezvous points are only used for Hidden Services. The Introduction point is chosen by the Hidden Service and published with the HSDir servers handling the Hidden Service. When a ...
user avatar
  • 1,473
4 votes
Accepted

How to assign a stream to a circuit?

Nice timing, we just expanded our tutorials around this! For this you should use new_circuit() and attach_stream() rather than NEWNYM. For an example of doing this see... https://stem.torproject.org/...
user avatar
  • 691
4 votes

Suddenly my Tor hidden service isn't available

Ok, I figured this out. For some reason the custom onion address I made with Shallot was no longer working. I made a new hidden service and got rid of the existing one, restarted Tor, and voila! I'm ...
user avatar
  • 41
4 votes

How does Tor protect against flooding with artificially long circuits

The type of attack you are describing is a congestion attack. In theory, the simplest form of such an attack would be a general DoS on the Tor network. Taking things one step further, a congestion ...
user avatar
4 votes

How does Tor client build circuits when using a bridge?

Yes, they are taken from the bridge. Every bridge has the latest directory information cached (just like any directory mirror), and Tor clients fetch them directly and build circuits with the bridge ...
user avatar
  • 725
4 votes

WARN: Failed to find node for hop 0 of our path. Discarding this circuit

Tor needs an accurate clock to work correctly. Please sync your time with an NTP (Network Time Protocol) server. Debian family On Debian based machines use package ntpdate. sudo ntpdate -v pool....
user avatar
3 votes
Accepted

Circuit Build Times in Tor

The Circuit-Build-Times are measured and saved for the CircuitBuild-Timeouts. So Tor is logging the time it takes to build a Circuit. The CircuitBuild-Timeouts are then used to eliminate circuits ...
user avatar
  • 134
3 votes

Relay streaming a large file

Exit relays will continue reading until circuit dies (in old versions) or buffer of a relay becomes too big (in new versions, intended to prevent DoS) . If you are a 'honest' client, the exit node ...
user avatar
  • 725
3 votes

Does Tor insert random delays or perform packet re-ordering to make the discovery of the communication path harder?

@Jens's answer has a great description of current Tor. The Tor-Browser adds some additional defenses, namely: it enables HTTP pipelining, so that several requests can be sent on the same "batch" it ...
user avatar
  • 387
3 votes

Multiple Tor processes to separate client traffic to improve anonymity?

You can run a single Tor daemon, but configure it to open multiple SocksPort (and/or TransPort & DNSPort) listeners. Applications that connect to different listener ports will use isolated ...
user avatar
  • 31
3 votes
Accepted

How feasible is that Directories grant you only compromised nodes to build the circuit from?

thanks for the question. First off, the "directories" you speak of are called "directory authorities" inside Tor. Their job is indeed to compile a list of all running Tor relays and make it available ...
user avatar
  • 2,209
3 votes

How to prevent a circuit from changing between browser tabs?

You can set the NoIsolateSOCKSAuth isolation flag on the Tor Browser SocksPort, e.g. SocksPort 9150 NoIsolateSOCKSAuth Or, for a more limited approach, something like MapAddress *.firstsite.com *....
user avatar
3 votes
Accepted

Stem: How to get current in-use circuit?

I put this example together using this STEM Tutorial. It shows the use of controller.set_conf('__LeaveStreamsUnattached', '1') to make your own circuits, attach a stream, and make a request using ...
user avatar
  • 1,274
3 votes
Accepted

Tor Browser Bundle (TBB) new circuit versus new identity

Your question does contain an accurate description of these features. But I think I can add some useful information. New Circuit: appears to affect only the open tab and creates a new circuit for ...
user avatar
  • 438
3 votes

Can somebody force my Tor circuits to always start from his "guard node", to access my traffic?

Yes. An attacker can perform a sybil attack or just kick down your guard node repeatedly until your Tor client choose a malicious node as guard. Controlling your guard node doesn't lead to decrypting ...
user avatar
  • 725
3 votes

Tor circuit selection

Yes you can. Settings in torrc: StrictNodes 1 ExcludeNodes {fr} Read more on how to configure your torrc file here.
user avatar
3 votes

Is it possible to make a program that will use different circuit for each request? Even if the requests are parallel?

I don't think so, at least natively. Looking at the manual for Tor, it doesn't look like there is any kind of functionality built in that would allow you to do that. Theoretically, you could do ...
user avatar
  • 2,141
2 votes

How to implement the modified source code of Tor?

In general you do the following steps: Check the source code from Tor's git repository or from the download page. Apply your changes Compile the code (./configure && make) You can install the ...
user avatar
  • 8,663
2 votes

How a client maintains a list of guard nodes, from among hundreds of guard nodes, for creating a circuit?

You can find your EntryGuards in your data directory. If you are using the Tor Browser Bundle, you have the list in Data/Tor/state. In other cases there will be a .tor directory in your home directory ...
user avatar
  • 1,182
2 votes

There is a good argument for making the number of hops in a path unpredictable, Is there a research paper that tells us what to do?

Hеllo, Roya! If we try to represent circuits as table, where: A letter C is a client A letter D is a destination A letter N is a node A number after letter N is number of node A compromised node ...
user avatar
  • 161

Only top scored, non community-wiki answers of a minimum length are eligible