19 votes
Accepted

How to run an obfs4 bridge?

The Tor Project's official guide is available here. It has instructions on how to set up an obfs4 bridge for several platforms, including Debian and Ubuntu. Don't forget to make sure that your OR port ...
user avatar
  • 2,762
11 votes
Accepted

How does Tor obfs4 protocol and PTs work?

The Tor Project Wiki has a good article covering this: A Childs Garden Of Pluggable Transports. The pluggable transport is used as a proxy for tors traffic, it provides an extra layer of ...
user avatar
  • 10.8k
4 votes
Accepted

How to install a Transport Plugin on OnionPi

I've built meek-client for RPi and RPi 2 at here, and I altered the provided install script a bit at here to automatically install meek-client and use meek-amazon. Install via curl -fsSL https://...
user avatar
4 votes

How to run an obfs4 bridge?

Great explanation, it helped me a lot. Like to add the following; These days I do not see a lot of obfs4 traffic yet. If you want to publish as an obfs3 AND obfs4 bridge relay you can change the line ...
user avatar
  • 41
4 votes
Accepted

Does using Email to send bridges and pluggable transport bridges hinder anonymity?

This is rather a non issue, I think. People typically use bridges when their Internet uplink (ISP, university, employer, etc.) blocks access to known entry guards. This may be part of national policy, ...
user avatar
  • 2,989
3 votes

TOR and Obfsproxy packet size

TOR cell size is 512 bytes but most TOR packets have size of 586 bytes. My question is that why there is such difference in size (74 bytes difference)? The 586-byte packet being referenced in the ...
user avatar
3 votes
Accepted

Tor TLS cipher suite negotiation and fingerprint defense

Today, Tor is moving away from looking like TLS, with pluggable transports being the solution for censored users. Tor is moving to using stronger cryptographic primitives so looking like a browser is ...
user avatar
  • 2,209
2 votes

How to add obfs3 bridges in Tor browser?

Fingerprint is not necessary here. Just type obfs3 ip:port and it will work. The "bridge" will be added automatically for each bridge and you might just keep it as it is. When the format isn't ...
user avatar
  • 121
2 votes
Accepted

Is TransPort deprecated? If not, what are recommended use cases?

From my point-of-view, torsocks and using TransPort selectively for some applications (e.g. like Mike's suggested setup for Android) is quite equivalent. Two key differences, though: torsocks will ...
user avatar
  • 627
2 votes

Does using Email to send bridges and pluggable transport bridges hinder anonymity?

How about bitmessage? https://bitmessage.org If Tor gives a bitmessage address to request bridges like how it is done in email. Bitmessage is said to be encrypted P2P messaging protocol but it is ...
user avatar
  • 21
2 votes
Accepted

Relation between ORPort and ServerTransportListenAddr

The attacker wouldn't be able to find you if nobody tries to connect to your ORPort. If you didn't publish the bridge descriptor, nobody will know your ORPort.
user avatar
  • 725
2 votes
Accepted

Feedback on this torrc-defaults file

All of the valid config options are detailed in the Tor config manual. It'd probably be quicker for you to read that than for us to enumerate each of the options included in your question. What if ...
user avatar
2 votes
Accepted

How to set up the Wfpad pluggable transport

it looks a version mismatch/conflict. It happens when you have an old version of package from your OS package manager and a new one installed otherwise in another location
user avatar
  • 5,421
2 votes
Accepted

ENVError while starting obfsproxy

obfsproxy should be setup inside of torrc if you wish to use it with tor, it shouldn't be executed seperately. The managed flag indicates that the opening process will be "managing" it, in this case ...
user avatar
  • 10.8k
2 votes

Why can't obfs4 , scramblesuit and fte be used in China now?

Probably has something to do with the GFW admins deploying something like this fairly recently described classifier. All the current obfuscators seem to fall to entropy distribution, header length, ...
user avatar
2 votes

Where can I find meek servers?

The meek servers are distributed with Tor Browser. The point of meek is to be difficult to censor not because the bridges are hard to find but because they're hard to distinguish from other traffic. ...
user avatar
  • 10.8k
2 votes
Accepted

Optimal configuration for an obfs4 bridge

What numbers to choose for OR and obfs4proxy ports? For an obfs4 bridge I'd recommend: Picking a low numbered port that's used by a common service for obfs4 (it takes a few extra steps to allow ...
user avatar
  • 10.8k
1 vote

Can one use pluggable transports to host hidden services?

Yes, bridge and pluggable transport users are able to provide onion services over them. Bridge users are just taking some extra steps to pick their guard (the bridge), use their guard as their ...
user avatar
  • 10.8k
1 vote

OBSF4 and scramblesuit

My little trick to connect to more obfs4 bridges in TAILS: First collect some working bridges via bridge DB (e.g. obfs3) or connect to regular tor. When connected cut the connection in the on/off ...
user avatar
  • 11
1 vote

Starting Tor Relay?

Your Tor log will report that it has successfully been able to perform a self-connectivity test, then you will also be able to find it in the next consensus assuming it was voted into it. You can also ...
user avatar
  • 10.8k
1 vote

How do I run a bridge with obfs3 pluggable transport?

Bridges aren't published, they won't be used as exits but the reject policy won't cause any harm. The config looks good and it should work. I might be worth a few small changes though, they may not ...
user avatar
  • 10.8k
1 vote

Is there a obfs4 package for ARMv5?

You should be able to build it natively, as per the README here or you can try to cross-compile from another architecture to armv5 using the method here. For example export GOARCH=arm export ...
user avatar
  • 10.8k
1 vote

Feedback on this torrc-defaults file

If you have IPv6 network access - yes, it looks OK. Some additions to these ones are the question of taste.
user avatar
  • 5,421
1 vote

How to install tor meek TP on openwrt flashed router?

Meek is written in Go. It has pretty reasonable cross-platform compilation options (compared to some languages). First, you don't only cross-compile based on the operating system, you cross-compile ...
user avatar
  • 10.8k
1 vote

How to install tor meek TP on openwrt flashed router?

You can't cross-compile using OS, you need a cross-compiling environment and you're also required to cross-compile Go language from source. Also take a close look at special Go fork for OpenWRT After ...
user avatar
  • 5,421
1 vote

What does the log line "not enough directory information to build a circuit" mean?

It is just normal. It means Tor client did not finish fetching consensus, and as soon as it finishes, it starts to build circuits.
user avatar
  • 725
1 vote
Accepted

Is it possible to use obfsproxy bridges and Meek bridges together?

You can! Tor's source code patch required - as I did it at first, but there is an easier way to do so, I've figured it out and it is literally zero-patch one! You'll need three Tor instances running ...
user avatar
  • 5,421
1 vote

Add bridges on expert bundle

Give me an example of what it should include: This is an example torrc file: DataDirectory C:\Documents and Settings\ron\Desktop\Tor\Data #ControlPort 9151 SocksPort 9150 # UseBridges 1 # bridge 60....
user avatar
  • 708

Only top scored, non community-wiki answers of a minimum length are eligible