New answers tagged

0

It seems like your tor is misconfigured.. (or I am misunderstanding) Are you trying to run a bridge relay? Or do you mean to specify that you want to use bridges, to establish a connection to the onion network through stringent conditions? SocksPort 9050 Log notice file ~/tor-notices.log RunAsDaemon 1 ORPort 443 Exitpolicy reject *:* #BridgeRelay 1 ...


0

Does this mean I have configured my router properly, The IP address is not a static one, if I now have to turn the TOR relay of for any reason will I have to reconfigure the Virginmedia Hub again? Not if you turn the relay off, but possibly if you turn your router off and your computer is assigned a new LAN IP. My asus router for example doesn't even let ...


1

If you are using a router (i.e. WiFi) to connect to the internet you need to portforward, e.g. external 80 to local 99999, and, ext 443 to loc 22222. And if you portforward to a different port than your advertised ORPort/DirPort/obsf4 Port, you need to update your /etc/tor/torrc file to listen on LAN IP or listen globally instead of loopback address which ...


1

From: Top changes in Tor since the 2004 design paper (Part 2) Bandwidth Authorities Of course, once you choose nodes with unequal probability, you open the possibility of an attacker trying to see a disproportionate number of circuits -- not by running an extra-high number of nodes -- but by claiming to have a very large bandwidth. For a ...


2

The short answer is that it could be. It is open source and anyone can write their own tool that could automate a one-click solution. The longer answer is because Tor isn't simple. The truth is that making an "easy" button is actually kind of a bad idea. A good relay operator is a well-informed relay operator. That means spending time learning the things ...


0

Recommendation: SSH over Tor. Create an v3 onion service for SSH. This will reduce your attack surface to only allow connections from Tor but not from the internet. Best practice for SSH security is to use a key to log in and not a password. Also, you can have SSH run on 2222 or some random port instead of the standard port 22 to further hide that it is ...


Top 50 recent answers are included