2

I uncommented the following line Log debug file /var/log/tor/debug.log in /etc/tor/torrc and restarted the tor service. I then read the following 268 lines in to the debug.log file: [warn] Failed to open GEOIP file /usr/share/tor/geoip. We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ...


1

This defcon 22 talk covers most of the possible ways to get caught using Tor: All tor nodes are known (except bridges). ISP or system administrator can figure out who was using tor at a given time and from what IP. That information can be used to narrow down who is using tor and find out the suspect. People can give away a lot of information themselves. One ...


1

Tor exit nodes ips are public and can be easily found. They can be found at dan.me.uk list or Tor metrics with exit flag. There is nothing you can do except for contacting site administrators and telling them to support connections from Tor (unlikely that they'll do it). If you still want to access the site, you can use a private proxy (you can use ...


1

Try using an obfuscator such as obfs4, and the corresponding bridges from bridges.torproject.org


1

The only possible way to avoid malicious exit nodes with a 100% certainty is by whitelisting the exit nodes you know for sure are not malicious (i.e. those that are under your control). The way to do that is by adding the following line in the torrc file as described in the manual: ExitNodes node1,node2,node3... Otherwise, the risks of using a malicious ...


1

As far as I know this is not possible All tor relay UP addresses are publicly available, including exit ones. Any webmasters that choose to block them can, in fact Tor Project operates a dedicated list for this purpose. Cloudflare also provides an option for sites using their services to block Tor traffic. Webmasters sometimes block for security purposes (...


1

What makes you expect that a hidden service will connect to an exit relay? A hidden service makes a circuit to a relay acting as a rendezvous, and the client makes a circuit to that same rendezvous relay, and the rendezvous transfers the cells between the client's circuit and the hidden service's circuit. Exit relays are only used to exit the Tor network ...


1

I'll tackle the easy question first: is it more secure to use HTTPS on a hidden service than pure-HTTP? https provides one thing for onion services that http does not. It provides proof that the service is legitimate and not fake. You can tell this by the fact that you get the green lock when you go to an onion service with an legit https certificate. ...


1

I would definitely recommend asking the person making the claim for the calculations underlying it. I suppose, if you had an all-open exit policy, and were in a location where traffic was fully-metered and very expensive, you might be able to rack up US$1,000/day in costs, but that is very far from the common case. Even if you were running an exit in such ...


1

The mentioned costs are definitely too much. It would be interesting to know what the base of this estimate is. I run different kind of Tor nodes. The cheapest one is a BananaPi. This is attached to a 100 MBit connection and makes ~30 Mbit. This costs next to nothing. You can also rent servers (sometimes a VPS works). So you can have a Tor node (middle or ...


1

From the Tor General FAQ Can I control which nodes (or country) are used for entry/exit? Yes. You can set preferred entry and exit nodes as well as inform Tor which nodes you do not want to use. The following options can be added to your config file torrc or specified on the command line: EntryNodes $fingerprint,$fingerprint,... A list of ...


1

~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Data/Tor you need to go here and do the changes.


1

There is procedure in Tor for reporting bad relays: https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays Send email to address bad-relays@lists.torproject.org and describe the behavior you observed (the suspicious criteria are in the wiki). There is no automatic way of detecting such nodes, only manually.


Only top voted, non community-wiki answers of a minimum length are eligible