11
Tor Browser Bundle tries to leaves no trace on the filesystem, but there are several limitations.
As documented in the most recent analysis (as of Sept, 2013), there are several places TBB leaves a trace on the filesystem, usually due to Operating System mechanics and not due to TBB's fault itself.
TBB can't avoid writing memory to disk in a swap space ...
6
The recommended way to browse the web through Tor is to use the Tor Browser Bundle. Using any other browser will make you different from the common anonymity set of Tor users.
Changing the configuration of the Tor Browser is not recommended exactly for the same reason: it is likely to make the browser behave differently from everyone else's.
Tails include ...
4
Apache doesn't run through Tor. It is a service that listens on the ip address(es) and port(s) you specify in its config file. If you want to configure Apache to host only hidden services, then you limit your listening IP address to 127.0.0.1:
Listen 127.0.0.1:80
After that, in the VirtualHost block, you put the onion address in the ServerName. For example:...
3
I have found the reason for such leakage. It is actually fingerprinting of browser kind of technique which Facebook uses. First of all I disabled the Bookmarks Toolbar in TBB and then created a new profile. This time it showed me pages of United States. Then I tried creating a new profile after disabling the "addons toolbar" and this time it showed me the ...
2
It's different because YouTube and some other video hosting sites support HTML5 video playback, which requires no plugins to function. It's just an open Web standard. That said, protocols like WebRTC that use methods like UDP hole punching via STUN may leak your actual IP address unless you're transparently proxying all your traffic through Tor or turn off ...
2
Any video that you can play inside TorBrowser should play safely, just make sure you don't install any additional plugins. This allows for example youtube to work almost all the time. There is no anonymity-preserving way to play videos that require Adobe's Flash player plugin currently and you should never trust the plugins that some websites offer you to ...
2
It looks like it attempts to learn your IP address via a WebRTC connection. That this is possible was reported a while ago, but it never affected TorBrowser users as WebRTC is disabled in TorBrowser. So, the js is not dangerous if you use Tor in the recommended way. If you don't, it is rather likely it'll leak your real IP address.
2
The download page had a warning, that you should visit https://www.youtube.com/html5 and enable HTML5 support. So you do not need flash to watch YouTube videos. However right now YouTube works without going first to this site. So this warning as removed with commit cb22dc9595d7c70c60d6cddf37c8b217a631fefc.
Now you can directly go to https://youtube.com and ...
1
DO NOT USE A VPN WITH TOR
This has been documented to be a very bad idea. The VPN will track everything you do, and destroy your anonymity.
Just connect directly to Tor, and if needed to access Tor, use bridges
1
Assuming the observer is watching all the traffic from your computer and also that specific server, I think your best bet to help mask your activity is to make sure you use Tor for more than just visiting that server. Even then, if they are watching both your traffic and the server's, I don't think there is a way to totally prevent correlation discovery.
1
I fixed it myself. I just added this directive to nginx.conf :
port_in_redirect off;
This directive briefly described in nginx doc: https://nginx.org/en/docs/http/ngx_http_core_module.html#port_in_redirect
1
When https://exonerator.torproject.org/ is working, it will tell you whether an IP address was a relay for a given date.
Besides that, you can find old consensuses and search yourself https://metrics.torproject.org/collector/archive/relay-descriptors/server-descriptors/
1
They will know you're (likely) using curl, similarly they might know you're using wget or pythons urllib based on the behaviour and other headers. They might be able to guess at other aspects of the system, sometimes information like architecture can be sent in headers (x86_64, i386, arm, ..., etc), I've seen kernel versions and linux distro reported in user-...
1
It gets your location from nearby wireless network names (ssid).
The "How does it work" section on https://www.mozilla.org/en-US/firefox/geolocation/ explains it:
How does it work?
When you visit a location-aware website, Firefox will ask you if you
want to share your location.
If you consent, Firefox gathers information about nearby wireless
...
1
adding to the types you've mentioned there're two other kinds of them:
Zero-Day exploits Tor browser is a Firefox by roots, so some Firefox zero-day exploits are affecting it too. It's OK for any software to have mistakes - it's written by people, people do mistakes.
External container Using things that are inside the browser is safe in case of Tor browser ...
1
You could capture the traffic with a tool like WireShark.
If it logs a direct connect to the used URL then the app is not using the Tor Socks Proxy.
torify is maybe also an alternative for you, it easily tunnels the network traffic through tor without having to configure the app you want to execute. A tutorial can be found here
1
Ohai !
You can use chromium with tor like that (look man) :
chromium --proxy-server="socks5://127.0.0.1:9050"
It should work :>
1
You can find out whether DNS requests are resolved by TBB or DNScrypt here:
http://ipleak.net/
(DNS detection only works with Javascript enabled)
Keep in mind that the DNScrypt GUI versions made by OpenDNS are highly outdated.
Newer versions of DNScrypt are available on dnscrypt.org
They are also configurable to use DNS servers other than OpenDNS's.
1
Opening a facebook account in itself could divulge who you are. consider the following:
You need an email address and/or phone number to open a facebook account. The information you provided to email service and/or phone company could become available to facebook. Based on that facebook can figure out a lot of information about you. Where you live could be ...
1
I can see a few possibiltes:
If you have friended anyone in your home country, facebook may be loading results based on what they like.
Facebook may be loading results based on the language you have chosen.
Facebook may be loading results that are internationally known, or known in most countries that use the language you have chosen (this is particularly ...
1
The Tor Project maintains several email accounts and mailing lists. The table at administrative lists shows the mailing list tor-security. So tor-security@lists.torproject.org is the contact address you're looking for.
There is a trac entry which discusses a documented way to report vulnerabilities (see #9186). It was discussed to create a OpenPGP key for ...
Only top voted, non community-wiki answers of a minimum length are eligible
