Hot answers tagged

7 votes
Accepted

What happens with TCP connections on SIGNAL NEWNYM?

Requesting a NEWNYM over the control port will tell Tor to consider the currently used circuits "dirty" (this normally happens after 10 minutes, with a few exceptions), at this point it will no longer ...
cacahuatl's user avatar
  • 10.9k
6 votes

How to change the entry node?

To actually answer your question, since nobody did that until now: shutdown Tor delete /tor/state file restart Tor In case you use TorBrowser on Windows the path is ...\Tor Browser\Browser\...
user136036's user avatar
5 votes
Accepted

Does tor browser open a new circuit for each unique website?

In Tor Browser, every domain gets it's own circuit. The Design and Implementation of the Tor Browser document has some more details on it. Frankly, you get an own circuit for every domain shown in ...
Peter Gerber's user avatar
  • 1,342
4 votes

WARN: Failed to find node for hop 0 of our path. Discarding this circuit

Tor needs an accurate clock to work correctly. Please sync your time with an NTP (Network Time Protocol) server. Debian family On Debian based machines use package ntpdate. sudo ntpdate -v pool....
NeverMine17's user avatar
3 votes

Tor circuit selection

Yes you can. Settings in torrc: StrictNodes 1 ExcludeNodes {fr} Read more on how to configure your torrc file here.
james-see's user avatar
  • 344
3 votes

Can somebody force my Tor circuits to always start from his "guard node", to access my traffic?

Yes. An attacker can perform a sybil attack or just kick down your guard node repeatedly until your Tor client choose a malicious node as guard. Controlling your guard node doesn't lead to decrypting ...
nobody's user avatar
  • 725
3 votes

Is it possible to make a program that will use different circuit for each request? Even if the requests are parallel?

I don't think so, at least natively. Looking at the manual for Tor, it doesn't look like there is any kind of functionality built in that would allow you to do that. Theoretically, you could do ...
elmerjfudd's user avatar
  • 2,264
2 votes

Login to site.com, request "New Tor circuit for this site", site.com still recognizes original login

Requesting a new circuit will get you exactly that -- a new circuit. It does not mean that Tor won't pick the same exit again, and it will not clean any cookies. It is trivial then of course for a ...
mo.'s user avatar
  • 21
2 votes

Can somebody force my Tor circuits to always start from his "guard node", to access my traffic?

You keep using the same guard node for a long time. This is by design. See this question: Why is a longer guard rotation period with fewer guards better than the other way around? Even if someone ...
Jobiwan's user avatar
  • 3,665
2 votes

What prevents CircID collision from happening?

There's a misunderstanding here. CREATE cells are sent just from immediate neighbours in a circuit, during circuit construction. So a client will send a CREATE cell to the entry node, where the ...
Sebastian's user avatar
  • 2,219
2 votes

Implementing the tor protocol, based on tor sources and a few clarifications

Step 7 is a TLS socket, not just raw TCP. "I created the onion hidden service, and i want to try make a http request to it", there are additional steps required for onion services which you'll know ...
cacahuatl's user avatar
  • 10.9k
2 votes

Does Tor choose nodes from nearby countries to create circuits?

No, Tor chooses nodes randomly. There are a lot of Tor nodes in Europe. So, you'll often see that your connections are using European nodes. (So does everybody else.)
Greg Hewgill's user avatar
2 votes

torsocks over torsocks? (by accident)

Torsocks sets the LD_PRELOAD environment variable to intercept a few system calls. It does not matter if you use it recursively: # at first $LD_PRELOAD is unset $ echo $LD_PRELOAD # when we start ...
Peter Gerber's user avatar
  • 1,342
2 votes

Why are entry nodes allowed to know that they are entry nodes?

The network doesn't make the distinction of entry relays. Any Tor client is allowed to use any relay for any hop of the circuit (except with restrictions on the exit relay). To limit the types of ...
Steve's user avatar
  • 3,132
2 votes
Accepted

Why can't a modified guard node compromise the network?

These types of attacks aren't possible in Tor because of Tor's ntor handshake and Tor's authenticated directory documents generated by the directory authorities. Tor clients download a trusted (and ...
Steve's user avatar
  • 3,132
2 votes

How TBB commands tor to use a "New Circuit for this Site"?

Short: it does not send a command. It creates new connection to SocksPort, using different credentials, and sends new requests to domain through it. Details: Tor do isolates streams to different ...
verb0's user avatar
  • 31
2 votes
Accepted

Determining circuit tor client is using

Tor clients keep a pool of circuits and may use several circuits simultaneously for streams depending on factors such as exit policies, stream isolation, etc. So there is generally not a single "...
Steve's user avatar
  • 3,132
2 votes
Accepted

understanding tor cell structure

In simple words: CircID serves the purpose to separate the circuits = onion 3-node chains. As it described in design - I'm citing: The header includes a circuit identifier (circID) that specifies ...
Alexey Vesnin's user avatar
  • 6,023
2 votes

Tor safe when taking future in to account?

Quantum threat is a real thing, especially in context of Shor's algorithm for a possible attack vector, for example. But there're a lot of quantum-resistant things like LWE and some EC's, so - using a ...
Alexey Vesnin's user avatar
  • 6,023
2 votes
Accepted

How do TOR nodes select the CircID's when creating, or extending, a circuit?

A circuit ID identifies a circuit on an OR connection. If this OR connection is between two relays, either relay can make new circuits on that OR connection. If a relay wants to create a new circuit, ...
Steve's user avatar
  • 3,132
1 vote

Does Tor choose nodes from nearby countries to create circuits?

As Greg Hewgill was saying: No, Tor chooses nodes randomly. But you can change it easily. Find where your torrc file is located. Add a line like that ExitNodes {**} StrictNodes 1. Where ** use ...
NeverMine17's user avatar
1 vote
Accepted

OR Forward and reverse keys

One key exchange is performed, the shared secret is streched using a Key Derivation Function (KDF). From tor-spec: 5.1.3. The "TAP" handshake .... Once both parties have g^xy, they derive their ...
cacahuatl's user avatar
  • 10.9k
1 vote

Tor encryption combination

Tor uses RSA keys as identity keys (except for .onion services, for the time being). For exchanging secret key material Tor uses an ephemeral key exchange method, either TAP (old, DHE) or nTor (new, ...
cacahuatl's user avatar
  • 10.9k
1 vote

Tor encryption combination

Here is the design document for tor's next generation onion service. The paper that you linked to is outdated. The next generation onion service is expected to launch with 0.3.2 around December 15, ...
anon's user avatar
  • 11
1 vote

How to list all tor circuits that have ever been established

There's no log for this kind of information - and for a good reason: it can hurt the privacy and anonymity of Tor. You can - technically - poll Tor regulary through Stem and keep the log for yourself, ...
Alexey Vesnin's user avatar
  • 6,023
1 vote

Can I configure tor always to try to use three DIFFERENT countries?

TLDR This may not be a good idea, and may harm your anonymity, the best thing to do is to leave Tor do its own routing algorithm. It can however be (approximately) implemented through torrc. https://...
nobodydone the math's user avatar
1 vote

How is Path Selection done in Tor?

Route calculations are based around the available bandwidth of each of the candidate nodes for a given circuit. In the formulae in your question, W is the weight ascribed to a given node, with full ...
Richard Horrocks's user avatar
1 vote

Circuit failed to establish

https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1167 10 -- TIMEOUT (Circuit construction took too long) ... 11 -- DESTROYED (The circuit was destroyed w/o client TRUNCATE) ...
cacahuatl's user avatar
  • 10.9k

Only top scored, non community-wiki answers of a minimum length are eligible