Hot answers tagged

7 votes
Accepted

Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?

No, the HS directory is accessed via Tor. See: https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549 The nodes running HS directories do form a distributed hash table, though it's not ...
7 votes

How does Tor route DNS requests?

You have to remember, that Tor is a PROXY. Proxies act on behalf of another, and therefore, theoretically you would only need to "resolve" the address of the first node of the circuit. But you don't ...
6 votes

Torsocks vs Proxychains?

You should prefer torsocks over proxychains, since torsocks is intended to block potential leaks. Especially in cases with tools like youtube-dl which might try to pass over execution to programs ...
  • 10.8k
5 votes
Accepted

Why does Tor publish IP addresses of exit nodes?

The list of all Tor relays and whether they are exits needs to be public, because Tor clients use this information to build circuits. There is no point in trying to keep this information 'secret' ...
  • 3,745
5 votes

Is it a better practise to use DNSCrypt over Tor or is it useless?

DNSCrypt does not give you protection against man-in-the-middle attacks, it just moves where the man-in-the-middle would need to be. For example, if the man-in-the-middle existed between your upstream ...
  • 10.8k
4 votes

How do I resolve DNS using Tor?

Use DNSPort 53 setting in torrc and configure nameserver to 127.0.0.1
4 votes

Does hosting a Tor hidden service also on clearnet DNS reduce privacy/security for the Tor user?

If a user connects to the clearnet webservice with Tor - then the webserver sees the exit node used by the user. If the user connects to the webservice through the .onion domain - the webserver sees ...
  • 1,863
4 votes

transparent proxy .onion firewall rules

I found the issue after some reading. The VirtualAddrNetwork setting was the same as the dhcp pool in my network configuration so when .onion domains were returned the browser was attempting to ...
3 votes

How do I revoke a .onion address?

Anyone with the private key can submit HSDir entries for a .onion address. There is no "registration" per se, only deriving the private key and its public key, but creating a private key with a ...
3 votes
Accepted

Register .onion as gTLD?

Update 2015 IANA added .onion to the list of Special-Use Domain Names. This was based on RFC 7686: The ".onion" Special-Use Domain Name. Tor’s ticket #6116: apply for .onion gTLD at IANA got ...
  • 398
3 votes

Host List Blocking

It works normally with Tor and without any configuration.For example, when your browser are trying to find IP of https://en.wikipedia.org/wiki/Domain_Name_System ,it will check hosts(this file in C:\...
3 votes

Can I run a Tor relay with Norton ConnectSafe DNS?

That is an issue in Norton ConnectSafe DNS. It is resolving invalid domain names. What is really happening is that Norton ConnectSafe DNS redirects to a Norton domain (used for advertising) in the ...
  • 1,195
3 votes
Accepted

How is tor traffic exempt from censorship/a country's DNS servers?

Yes, that's possible. Note that no serious censorship is done through DNS (alone) though, it's trivially easy to defeat, even without Tor. Exit relays should be censorship free, so people shouldn't ...
  • 10.8k
3 votes
Accepted

What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?

Ah, the answer turns out to be "use AutomapHostsOnResolve 1." From the Tor manual for the AutomapHostsOnResolve configuration directive: When this option is enabled, and we get a request to resolve ...
  • 181
3 votes
Accepted

Autodiscovery of Hidden Services Given a Domain or a Website

This is now possible in Tor Browser 9.5: https://www.torproject.org/releases/tor-browser-95/ You can set the Onion-Location HTTP header or add a <meta> tag to the HTML. See https://community....
  • 2,898
2 votes

Do DNS servers know sensitive info about me?

Tor is saying that a program did not use DNS through Tor and instead used DNS through your clearnet IP address. While the DNS server, and those that saw your connection to the DNS server, do not know ...
  • 933
2 votes

Will Tor work in an "openDNS" system

Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups. The connections you make over it should be ...
  • 10.8k
2 votes

How to prevent DNS leaks?

I do recommend to use an anonymizing routing box and make a tcpdump running on it's internal interface where your device/PC is connected. Every leak will be hard routed to/through Tor via firewall or ...
  • 5,471
2 votes
Accepted

How to prevent DNS leaks?

Related question: How can I test an application for proxy leaks? (duplicate?) Viewing the traffic can tell you if they have leaked, nothing short of thorough code review can tell you if it ever will ...
  • 10.8k
2 votes
Accepted

How to only use Tor to resolve DNS queries

"-atop", the t stands for TCP. Tor's DNSPort is UDP. Try ss -uln. It's also not a full DNS implementation and it only handles A, AAAA and PTR lookups.
  • 10.8k
2 votes

What is up with these longer onion addresses?

After a bit of searching, I did find this article. It seems that I'm a little behind the times, so to make up for asking a silly question, I'll answer it for anyone still wondering: Technical ...
2 votes

DNS in Tor and Tor Browser

Yes Tor Browser does a great job of preventing DNS Leaks. Even torsock on the Linux CLI does an admirable job of preventing DNS Leaks for Linux CLI apps. I did some testing on my own with several apps ...
  • 2,191
2 votes

Are .onion sites decentralized?

It's decentralized in significantly different fashion than .crypto domain. In blockchain-backed domain system you can claim any name not claimed by anyone else. In .onion all you can do is to generate ...
1 vote

Debian-based: torsocks + Chromium-browser = DNS Leakage?

Ohai ! You can use chromium with tor like that (look man) : chromium --proxy-server="socks5://127.0.0.1:9050" It should work :>
1 vote
Accepted

Is it useful to install DNSCrypt-proxy with Tor?

DNSCrypt encrypt the communication between the client, and the resolver. If you are worried about DNS leaks, DNSCrypt can add an extra layer of security. To answer your last question, your ISP doesn'...
  • 460
1 vote

torrc DNSPort 53 - Tor browser will not start / Ubuntu 15

On Linux based systems only root can bind ports between 0 and 1024. Thatswhy the operating system forbids you to use port 53 in this case. Here is a nice answer which explains this fact for a ...
  • 8,683
1 vote

Can I safely log in to google account without an issue?

Here is what is happening: google has been tracking your logins ever since you first made your email. By now they have an exact fingerprint on you that allows them to determine whether or not it is ...
  • 510
1 vote

No-ip alongside Tor

Is there a way to resolve Dynamic DNS with Tor[?] No, not in the sense I am pretty sure you mean. Is there a way to [connect to a] Dynamic DNS [address] with Tor so that I can connect to my ...

Only top scored, non community-wiki answers of a minimum length are eligible