3
votes
Accepted
What prevents directory server from being attacked?
What prevents a directory server from being dishonest and give malicious data to the user?
The information served by the directories is generated by reaching a consensus between the authorities. You ...
- 1,342
2
votes
Can't governments who want to censor Tor just block the directory authorities?
When a normal client first starts it fetches the directory information from a directory authority (or a fall-back). Since it does not know any relays it has no choice but to fetch them directly. At ...
- 11k
2
votes
Accepted
Set up Tor as internal Network
My company is looking to use Tor internally for our network, using our own directory authority server, and would like to know if it's possible and how to do it
First of all, if your company have the ...
- 670
2
votes
Does the Tor browser save cached versions of .onion sites to computer?
The Tor Browser is designed to avoid writing any sensitive data to disk unless the user changes the default settings to enable a feature that does record sensitive data. So with the default settings, ...
- 3,142
2
votes
Accepted
Connecting to Tor Directory Authority via Proxy Server (Protocol Question)
Tor processes (client proxies, relays, bridges, etc) do not communicate over HTTP. They use a custom link protocol within a TLS connection. You must use a tor proxy (or generally, a proxy that speaks ...
- 3,142
2
votes
How are the Directory Authorities chosen?
Could this distribution cause any disadvantages for relays or users outside of Europe or America? Like higher latency, or lower bandwidth for relay measurements?
Yes, but for most cases this wont be ...
- 21
1
vote
Tor directory servers
The list of directory authorities (src/app/config/auth_dirs.inc), as well as a list of stable default directory caches/mirrors (src/app/config/fallback_dirs.inc), are built directly into tor.
- 3,142
1
vote
Accepted
Tor consensus store location
The Tor Browser downloads the microdescriptor consensus, which you can find at Browser/TorBrowser/Data/Tor/cached-microdesc-consensus.
- 3,142
1
vote
If a client has a not-so-not-fresh consensus (<24hr), does he download the whole consensus again directly or from a relay?
As far as I remember consensus documents are downloaded from the directory guards. Currently, every client has three guards but that's subject to change.
I believe you never download the full ...
- 1,342
1
vote
What's the difference between 'secret_id_key' and 'ed25519_master_id_key'?
secret_id_key is an RSA key and ed25519_master_id_key is a Ed25519 key used for Hidden Services v3.
Here is what the spec says about it: https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#...
- 670
1
vote
Accepted
Upload image file from directory to websites
Twitter is probably using the canvas to manipulate the photo. There are several other posts about Twitter photo uploads not working due to the canvas, but last year Tor Browser changed the canvas ...
- 3,142
1
vote
Search engine optimization for .onion sites
It is totally up to "designer" of this Search Engine, is not?
Google has published their index-method, it is called PageRank, so here you could at least guess a little bit... Nevertheless, ...
1
vote
Accepted
What happens when an ISP blocks all directory servers?
If Tor is blocked, you should use a bridge (typically one supporting the obfs4 transport). You can get a bridge in the settings of the Tor Browser, or from https://bridges.torproject.org/. If you ...
- 3,142
1
vote
Accepted
how to find onion websites?
https://www.reddit.com/r/onions/ has a large number of them. Make sure to read the sidebar for a list of search engines. You can find all contributed onion services here.
The Tor project's own onion ...
- 2,284
1
vote
Accepted
How is a Tor relay's advertised bandwidth verified?
From: Top changes in Tor since the 2004 design paper (Part 2)
Bandwidth Authorities
Of course, once you choose nodes with unequal
probability, you open the possibility of an attacker trying to see a
...
- 2,284
1
vote
Are 7 hops really necessary when connecting to an Onion Service?
Onion services require seven hops because it is important that nobody, not even the rendezvous point, is able to deanonymise either the client or service, even in the presence of adversaries ...
- 562
1
vote
Unable to open a web-page in Tor
It appears to be a url redirection issue.
When I open the https://read.amazon.com link on Firefox, it redirects to https://www.amazon.com/ap/signin?openid.assoc_handle=amzn_kweb&openid.return_to=...
- 61
1
vote
Accepted
Running Authoritative directory
My question is would this be helpful to run an directory authority?
If some random person could become a Directory authority, that person would be able to pull off some serious attacks on the whole ...
- 670
1
vote
Establishing an encripted directory connection failed(done - 85.25.213.211:80)
Remove, comment out or set to 0 the DisableNetwork line in your torrc config file.
DisableNetwork 0|1
When this option is set, we don’t listen for or accept any connections other than controller ...
- 141
1
vote
How does tor network calculate relay status?
The documentation regarding the Stable flag:
"Stable" -- A router is 'Stable' if it is active, and either its Weighted
MTBF is at least the median for known active routers or its Weighted MTBF
...
- 532
1
vote
How to submit suggestions to tor project?
To submit a suggestion or a feature request, then you should open a ticket on the Tor Project bug tracker at https://trac.torproject.org/
Before you do submit it, you may find that the changes to the ...
- 11k
1
vote
Accepted
Directory Cannot be Readed: Permission Denied after update to 0.3.0
Same issue here. Solution:
systemctl edit [email protected]
in editor write these lines:
[Service]
AppArmorProfile=
then restart it
systemctl restart tor.service
1
vote
Accepted
New hidden service want exposure
Your options are the same as for a clearnet site, advertising.
Use (anonymous) social media accounts to advertise the site. If you want to stay anonymous, make sure there is nothing in the social ...
- 138
1
vote
"Directory cache", "directory mirror" and "directory server". Are they synonymous terms in the context of the Tor network?
In version the directory spec v2 directory cache appear to be synonymous:
… Routers may act as directory mirrors (also called "caches"), …
I also took a look at the current ...
- 1,342
1
vote
failed to Establishing an encrypted directory connection failed (done - 0.0.2.0:3)
It looks like you have a SSL/TLS attack/intrusion. Try using meek pluggable transport, it is designed specially for the cases like this one
- 6,265
1
vote
Can the tor initial client to relay or bridge connection be MITM attacked?
Q 1 So I am assuming that this is unencrypted data. Is this correct?
There is no "data", this is a TCP handshake, you cannot send data until the 3 way handshake is completed. This is simply ...
- 11k
1
vote
Extra Tor bridges
I just duplicated the first message to test, and received three bridges. Must have been a system glitch. The text in the body of the email both times was get transport obfs4. I no longer needed more ...
1
vote
Accepted
What are the immutable characteristics that uniquely identify a relay?
The answer to my question is here. Excerpt (emphasis mine):
When upgrading your Tor relay, or moving it on a different computer, the important part is to keep the same identity keys (stored in "...
- 323
1
vote
Cannot open Tor Browser using Terminal
on Ubuntu 18.10 it works now ... just get into dir once download is expanded
cd ~/src/tor-browser-linux64-8.0.3_en-US/tor-browser_en-US
./start-tor-browser.desktop --help
which suggests you issue
...
- 111
1
vote
Accepted
What is the difference between a directory server and a hidden service database?
The "database" in the picture is an abstraction, it just represents some shared lookup mechanism.
Relays with certain properties can be assigned the HSDir flag.
Bob chooses 6 of these relays in the ...
- 11k
Only top scored, non community-wiki answers of a minimum length are eligible