7 votes

How does Tor route DNS requests?

You have to remember, that Tor is a PROXY. Proxies act on behalf of another, and therefore, theoretically you would only need to "resolve" the address of the first node of the circuit. But you don't ...
user avatar
7 votes
Accepted

What happens with TCP connections on SIGNAL NEWNYM?

Requesting a NEWNYM over the control port will tell Tor to consider the currently used circuits "dirty" (this normally happens after 10 minutes, with a few exceptions), at this point it will no longer ...
user avatar
  • 10.8k
5 votes
Accepted

WebSocket over Tor

I have not used or tested it myself, but there are .onion sites that use web sockets, and there is no reason why it should work any different than with a normal, non-hidden site. Your web server must ...
user avatar
  • 3,745
5 votes

RDP over Tor - safe?

Wikipedia says: The RDP protocol in its default configuration is vulnerable to a man-in-the-middle attack. Administrators can enable transport layer encryption to mitigate this risk. RDS over TLS ...
user avatar
  • 155
4 votes

How does it work - "Hidden services"?

Could somebody explain step-by-step? A good starting point on the entire process is here. Why nobody can extract all onion domains from Tor network? The Tor network is deliberately decentralized ...
user avatar
4 votes

What is the risk of guard relay and exit relay being one and the same?

The Tor spec says: 5.3. Creating circuits When creating a circuit through the network, the circuit creator (OP) performs the following steps: Choose an onion router as an exit ...
user avatar
  • 61
4 votes

Does Tor add encryption at the TCP protocol level?

This isn't a good idea. TCPCrypt is, and I can't stress this enough, absolute trash. It provides no protection against an active MITM attacker, it's not authenticated. The remote party too must ...
user avatar
  • 10.8k
3 votes

TOR and Obfsproxy packet size

TOR cell size is 512 bytes but most TOR packets have size of 586 bytes. My question is that why there is such difference in size (74 bytes difference)? The 586-byte packet being referenced in the ...
user avatar
3 votes
Accepted

Using Tor Proxy through other aplications

Answer 0: There is always a way to be monitored by your ISP, because your information (packets) goes through its physical infrastructure (usually fiber cable) at least there is a way to know if you ...
user avatar
  • 141
2 votes

Is all traffic using the file protocol (file://) for smb/samba shares routed through Tor using tor browser?

I did some testing on my own and my conclusion is that the connection is in fact established outside the tor browser sandbox. The tor browser is merely functioning as some kind of "window" for the ...
user avatar
2 votes

Are Tor Hidden Service Addresses private by default?

If you really want a hidden service to be private, you need to use authenticated hidden services. On the server side, this is the HiddenServiceAuthorizeClient options, and clients will then need to ...
user avatar
  • 627
2 votes

How does TOR extend circuit to a third node?

Does Alice talk to OR2 directly to extend the node or it talks to OR2 through OR1? Alice talk to OR2 through OR1( the entry node). You can see from the image below: To extend to a node n, a relay ...
user avatar
  • 708
2 votes
Accepted

Add SocksPort using Tor Controller?

I gave it a shot, and it appears to work: setconf SOCKSPORT=23999 SOCKSPORT=24999 250 OK getconf SOCKSPORT 250-SocksPort=23999 250 SocksPort=24999 GETINFO net/listeners/socks 250-net/listeners/socks="...
user avatar
  • 131
2 votes

Can tor nodes (entry, exit, others) store IPs?

What you say is true. This attack exists. If all the nodes are controlled by an attacker such an attack works. However Tor is designed to make it somewhat hard for one attacker to control all the ...
user avatar
  • 1,182
2 votes

How does tor find the nodes?

The IPs and public keys of 9 directory authorities is compiled into Tor. Tor can download an initial list of all relays (the consensus) from those directory authorities. See this section of the Tor ...
user avatar
  • 3,745
2 votes

Allowing socks request for anonymous connections to a private address?

You can not connect through Tor to a computer inside your own network. You can only connect to hidden services or to hosts that can be reached from exit nodes. This is not because it it not allowed, ...
user avatar
  • 3,745
2 votes
Accepted

Are all tor exit nodes known?

There wouldn't really be any benefit to the attacker sniffing the exit traffic and then routing it over Tor again. Theoretically it would be possible. They can run an exit node, and configure their ...
user avatar
  • 260
2 votes

Tor router validation

https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt?id=ebb7d8701d000683ec7016176996f168dd10637b#n2085 "Valid" -- a router is 'Valid' if it is running a version of Tor not known to be broken, ...
user avatar
2 votes
Accepted

Clearing the state of rendezvous client provides privacy improvement?

Is there a risk the server can learn the connection between Alice and Bob without clearing the state of the rendezvous client? If so, then how much of this risk is? Yes. It could be possible for an ...
user avatar
  • 10.8k
2 votes

How TBB commands tor to use a "New Circuit for this Site"?

Short: it does not send a command. It creates new connection to SocksPort, using different credentials, and sends new requests to domain through it. Details: Tor do isolates streams to different ...
user avatar
  • 31
1 vote

Does Tor add encryption at the TCP protocol level?

No it does not. Tor makes your "request->destination" chain to be private, at the exit node traffic is released "as-is", no modifications
user avatar
  • 5,401
1 vote

Is ADD_ONION control command implemented in the latest stable release?

According to the line 1405 from control-spec.txt, it's present since Tor 0.2.7.1-alpha. Current Tor Browser Bundle (version 5.0.6) use Tor 0.2.7.6, which is a stable one. ADD_ONION should be ...
user avatar
1 vote
Accepted

Usage and purpose of variable-length cells?

Have a look at the 2014 DRAFT v1, Tor Design Document (which seems to be more up-to-date than the version in the Tor SVN repository). Cells are discussed in section 4.1 (page 5). The short answer is:...
user avatar
1 vote
Accepted

Can HORNET be implemented into Tor?

Is there some fundamental difference between the two? AFAIK, the fundamental difference is that Tor works in the TCP layer and HORNET works in the Network layer. So, implementing HORNET in Tor may ...
user avatar
  • 708
1 vote

How to change Tor exit node when using multiple SocksPorts?

Tor doesn't require SOCKS5 login/password authentication but it creates different circuits for each unique login/password pair. So you can just use different random login/password to authenticate ...
user avatar
  • 111
1 vote
Accepted

Can a relay decide which protocol to use (TAP or ntor)?

So I gues to start off: since 0.2.6.1-alpha - 2014-10-30 tor relays and clients are required to support ntor: - Remove the --disable-curve25519 configure option. Relays and clients now are required ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible