Hot answers tagged

7 votes
Accepted

How do clients know if a descriptor is new/changed/or disappeared from the Tor network?

Tor maintains a descriptor store which keeps all the descriptors it knows about. New descriptors enter the store after being downloaded, old descriptors get expired when they haven't been referenced ...
user avatar
  • 2,209
4 votes

Suddenly my Tor hidden service isn't available

Ok, I figured this out. For some reason the custom onion address I made with Shallot was no longer working. I made a new hidden service and got rid of the existing one, restarted Tor, and voila! I'm ...
user avatar
  • 41
3 votes

End-to-End encryption using hidden services

A Tor onion service host chooses several Tor nodes to serve as the host's introduction points. The host builds circuits to those nodes, and tells the nodes to use those circuits to forward ...
user avatar
3 votes
Accepted

Do Tor Clients and Caches download the WHOLE totally new consensus file every one hour, or just update some lines in the file every 10 seconds?

Good and detailed question, but you're misunderstanding a key point about descriptors. A descriptor doesn't change, once you've downloaded it you don't update it. This is guaranteed by using hashes - ...
user avatar
  • 2,209
3 votes
Accepted

How many times does client fetch the consensus file from directory authorities?

As far as I see it the answer is in the source code. ;-) The file main.c has a function run_scheduled_events. The comment to this function says: Perform regular maintenance tasks. This function ...
user avatar
  • 8,663
3 votes
Accepted

Using Tor Browser with alternate Tor client - works but issues warning

What does Tor Browser test for that fails when using a different / non-local Tor as the client? With the default settings, Tor Browser: Starts its own instance of Tor when you first open the browser ...
user avatar
2 votes

How many times does client fetch the consensus file from directory authorities?

From what I gathered, I have not found anything that point that a client periodically fetch the consensus file. On the other hand, consensus files do expire, and when that happens the client will ...
user avatar
  • 1,195
2 votes
Accepted

Finding out if a web user is using Tor

There are two different questions lurking here. When you use Tor to connect to a website, the IP address of the Tor exit node will, of necessity, be visible to the website that is being contacted. In ...
user avatar
  • 740
2 votes
Accepted

Probability by bandwidth: Using multiple or one Relay with equal total Bandwidth

There are multiple practical reasons where five ORs of bandwidth X MB/s each could be superior to one OR of bandwidth 5X MB/s. There are some restrictions and exceptions to this point in general. This ...
user avatar
  • 3,236
2 votes
Accepted

Does all direct clients have to talk to Directory Authorities to fetch the consensus at the first step?

Every client that doesn't get its consensus from some other source (clients that use bridges get theirs from the bridge they connect to) will have to connect to the Directory Authorities once at first ...
user avatar
  • 2,209
2 votes

Entry guards and multiple Tor clients

TL;DR The answer will depend on what you consider important, and what your Tor use-case is. (Similar to the hand-waving over threat models mentioned in another answer.) However, in general, the ...
user avatar
2 votes

Usage if I don't need anonymity but want to help others?

(Just to add to the other answers with one that's possibly quite simplistic and obvious... ) So should users like me (who are personally not bothered about anonymity) follow different ...
user avatar
2 votes

Usage if I don't need anonymity but want to help others?

Running a relay is a great start if you have the resources, but using Tor for at least some of your daily browsing does help make Tor traffic look more "normal" indeed. If websites see more of their ...
user avatar
  • 2,890
2 votes
Accepted

What are some ways an ISP blocks access to Tor network or to websites visited using a Tor client?

The Tor project provides a list of entry nodes, so they can block those by IP address. But then there are bridges that aren't in the list that can act as an entry node. But if the censor is using DPI (...
user avatar
  • 174
2 votes

How TBB commands tor to use a "New Circuit for this Site"?

Short: it does not send a command. It creates new connection to SocksPort, using different credentials, and sends new requests to domain through it. Details: Tor do isolates streams to different ...
user avatar
  • 31
2 votes
Accepted

Determining circuit tor client is using

Tor clients keep a pool of circuits and may use several circuits simultaneously for streams depending on factors such as exit policies, stream isolation, etc. So there is generally not a single "...
user avatar
  • 2,648
2 votes
Accepted

Sending a request over Tor without binding port on localhost

If you plan on using the standard tor implementation, then yes you will need to use some form of local proxy. If you don't want to bind the SOCKS port to a localhost address, you can also use a unix ...
user avatar
  • 2,648
1 vote
Accepted

Linux tor.service fails with "Unable to raise RLIMIT_MEMLOCK" at boot

The tor.service is normally run as a non-privileged process (i.e. the process' owner's UID is not 0). This is true unless (as is the case here) the flag DisableAllSwap is set to 1 (default is 0) in ...
user avatar
  • 111
1 vote

Updating api for third-party developers

For Tor Browser there are various ways to check what the latest Tor Browser version is: The Firefox updater uses this XML file to determine if there is an update available (note that the URL is ...
user avatar
  • 10.8k
1 vote

The scary torrc

First of all, backup your /etc/tor/torrc and revert to the original of something breaks. cp /etc/tor/torrc/ /etc/tor/torrc.backup All of the rest is in the manual. Exit nodes: ExitNodes node,...
user avatar
  • 2,141
1 vote
Accepted

how to find onion websites?

https://www.reddit.com/r/onions/ has a large number of them. Make sure to read the sidebar for a list of search engines. You can find all contributed onion services here. The Tor project's own onion ...
user avatar
  • 2,141
1 vote
Accepted

Tor Client limit bandwidth

You can find this in the manual... There are tons of different handlers against bandwidth, as client-node, the same as a relay-node... e.g. GENERAL OPTIONS BandwidthRate N bytes|KBytes|...
user avatar
1 vote
Accepted

Import a SSL Client Certificate into the Tor Browser

I think this is a known bug. See: https://trac.torproject.org/projects/tor/ticket/14269
user avatar
1 vote

TCP/IP Packet node-to-node propegation in Tor

Simple answer: No. Tor is not working on layer 2. Tor uses a socks proxy to receive data from applications. All TCP headers would be dropped and payload would be reassembled into "cells". Destination ...
user avatar
  • 725
1 vote

TCP/IP Packet node-to-node propegation in Tor

how does the node after know where to transmit the packet afterwards? And how would the Exit relay know to which IP it is to finally route the traffic to? Simply put: Your client first selects the ...
user avatar
  • 174
1 vote
Accepted

TCP/IP Packet node-to-node propegation in Tor

Well,it`s complicated,I guess these two links can help :https://www.torproject.org/about/overview.html.en and https://en.wikipedia.org/wiki/HTTP_Secure Note this :"Everything in the HTTPS message is ...
user avatar
1 vote

How many clients are typically using Tor simultaneously? How many circuits are simultaneously in use?

You will be very interested in a document on the tor metrics website that explains the collected data further. Please let me know if there is anything missing there, and I'll try and improve this ...
user avatar
  • 2,209

Only top scored, non community-wiki answers of a minimum length are eligible