15 votes

How to properly start tor service

Normally the Tor service should be started/stopped with either: sudo systemctl start/stop tor.service Or: sudo service tor start/stop Personally I've always used the service command because it is ...
user avatar
13 votes
Accepted

Is using Tor on Windows dangerous?

"...Windows is full of key-loggers, Trojans and..." is a bit overblown. In general, the chances of a Windows box being infected with malware are higher than a Linux box. Mainly because Windows is a ...
user avatar
  • 3,745
9 votes
Accepted

HTML5 Canvas Security Flaw

Using the HTML Canvas a malicious website can perform various tests to learn a large array of information, in relation to graphics, which can be used to fingerprint users. Tor Project design docs (...
user avatar
  • 933
9 votes
Accepted

Does Tor latency leak location information?

There's one important fact that makes such an attack extremely difficult. A connection between a Tor client and a Tor hidden service is actually composed of two entirely separate circuits that both ...
user avatar
  • 419
6 votes

Securely hosting a Tor hidden service/site

Interesting discussion points thus far. Use VMs as discussed. I prefer VMware because of the networking, cloning, console access, replication, etc. No need for an OSS hypervisor discussion. ...
user avatar
  • 61
6 votes

How do I import bookmarks into Tor Browser?

Do the following steps one by one: Click on the Bookmarks icon (the clipboard icon not the star icon) next to the location bar Select Show all Bookmarks Click on Import and Backup menu in the new ...
user avatar
  • 79
6 votes
Accepted

Can I track other users on Tor?

You can tell that they use Tor, but not what they do on Tor. Not from sniffing the network alone. If you own the machines they use, you could install software on it that tells you what they do, ...
user avatar
  • 3,745
6 votes

TOR Anonymity Query

Your "source" at the "CIA" (i.e. your "friend" with the tinfoil hat (i.e. you)) is wrong. It was created by the US Naval Research Lab, some of whom are still active within the community. It's not ...
user avatar
  • 10.8k
6 votes

Security of Tor bridges and Captcha

Any captcha system can be broken by paying people. The captcha has been attacked in the past by a nationstate adversary. The captcha isn't critical to the security of Tor, it does present problems ...
user avatar
  • 10.8k
5 votes

Can technicians track my computer which has an image on it if I use Tor?

If you use Tails, then if they've installed software, it won't run while you use Tails. If you download Tails using a different computer, they won't know you downloaded it at all. You can also use a ...
user avatar
  • 185
5 votes

Releasing a controversial movie torrent using Tor Network for security

Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking,...
user avatar
  • 2,989
5 votes
Accepted

How secure is downloading Tor from a PPA vs. from official website?

As far as I see it, the package file brings its own version of the Tor Browser Bundle. So if you want to make sure that someone didn't change anything you'd have to check the integrity for yourself. ...
user avatar
  • 8,663
5 votes
Accepted

What encryption algorithms does Tor use?

What encryption algorithms does Tor use? See the following sections of the Tor Protocol Specification: 0.2 Security parameters 0.3 Ciphers Isn't RSA 1024 considered weak? 1024 hasn't been broken ...
user avatar
5 votes
Accepted

Is Tor completely anonymous?

This setup may, or may not, be completely anonymous, depending on a whole bunch of factors, some extremely subtle. Adding a VPN to Tor basically never improves anonymity, though. Exactly how someone ...
user avatar
  • 552
4 votes

Securely hosting a Tor hidden service/site

Since mirimir already mentioned running tor and webserver on seperate computers, I will mention that Whonix is a great Debian-based GNU/Linux build for anonymity of users and servers. Also, having a ...
user avatar
4 votes

Is it safe to send identifying information unencrypted through Tor?

You need to accept that all things flowing through an exit node are most likely analyzed by big brother government. Everything you send must keep your anonymity. If you are deploying sensitive ...
user avatar
4 votes

Can Tor be used with applications other than Web browsers?

Applications that support SOCKS As mentioned by @zhenech any application that supports SOCKS can be used with Tor. Here are few examples that show your IP changing via an IP identifying website: ...
user avatar
4 votes

How to completely delete every single trace of Tor from Windows 7 Truecrypt folder

This is a tough question for any operating system. And it's especially tough for operating systems, such as Windows and OS X, that are largely closed-source. It's arguable that Windows' logging ...
user avatar
  • 2,989
4 votes

What are advantages and disadvantages of Tor with respect to JonDonym?

JonDonym and Tor differ greatly in both design and implementation. First, JonDonym is a mix network, whereas Tor is an onion-routing network. Quoting Syverson (2009) Why I'm not an Entropist: Mix ...
user avatar
  • 2,989
4 votes
Accepted

What are advantages and disadvantages of Tor with respect to JonDonym?

JonDo now accepts Bitcoins for premium accounts... Anonymous payments for JonDonym premium accounts are possible by Paysafecard (Euro, Dollar) and by snake mail letter too. See "Available billing ...
user avatar
  • 56
4 votes
Accepted

Does using Email to send bridges and pluggable transport bridges hinder anonymity?

This is rather a non issue, I think. People typically use bridges when their Internet uplink (ISP, university, employer, etc.) blocks access to known entry guards. This may be part of national policy, ...
user avatar
  • 2,989
4 votes

Can technicians track my computer which has an image on it if I use Tor?

Short answer: Yes Long answer: It is not possible to locate a single computer in the midst of the internet just by knowing its serial number or properties like the computer name. However, they can ...
user avatar
  • 151
4 votes

For a given app, is using a SocksPort more secure than using a web proxy such as Polipo?

Unfortunately, neither method is completely foolproof. With SOCKS, the application may implement socks proxy support in a way that leaks DNS requests; you need to verify that the program delegates ...
user avatar
  • 41
4 votes

Best advise for Tor users?

There are a couple of things you should do. Keep your browser secure. Use Tor Browser and if websites allow it, disable JavaScript. This makes your browser way more secure, but also makes attacks on ...
user avatar
  • 1,182
4 votes
Accepted

Is Tor browser Compromised?

This is not a indication that Tor is compromised The captcha on startpage.com is used to prevent data scraping by limiting the number of searches. When the limit is reached a captcha is shown. Tor ...
user avatar
  • 156
4 votes

Does hosting a Tor hidden service also on clearnet DNS reduce privacy/security for the Tor user?

If a user connects to the clearnet webservice with Tor - then the webserver sees the exit node used by the user. If the user connects to the webservice through the .onion domain - the webserver sees ...
user avatar
  • 1,863
4 votes
Accepted

How does Tor defend against Sybil attacks?

Lizard Squad was a pretty noisy sybil. We have monitoring for events of that sort... https://gitweb.torproject.org/doctor.git/tree/sybil_checker.py Naturally that event has sparked interest in more ...
user avatar
  • 691

Only top scored, non community-wiki answers of a minimum length are eligible