A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.
9

Nodes in circuits are chosen randomly. (Selection is weighted by a way-too-complex function of capacity, roles, etc, but it's still a random selection.) Sometimes, two random choices will actually be the same, just like sometimes a coin toss will indeed be heads-up twice in a row. That means that every once in a while a new circuit will exit from the same ...


6

Tor puts many streams onto a single circuit. If possible, the same circuit is used for up to 10 minutes -- see For how long does a circuit stay alive? for some details. Accordingly, if you visit a website and it takes a hundred http connections to fetch it all, Tor will use the same circuit for all of that. If you stay on the website for a while and load ...


5

The ip of the exit relay does not say anything about your identity. The whole circuit is replaced, not (just) the exit relay, so it shouldn't matter if you end up on the same exit node. As for theTorbutton vs Vidalia new identity, the Torbutton additionally clears out your browser's session cookies, cache, history, etc and closes open tabs. Vidalia just ...


4

Nice timing, we just expanded our tutorials around this! For this you should use new_circuit() and attach_stream() rather than NEWNYM. For an example of doing this see... https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection


4

Circuit on-demand are purposely to replace the previous circuit if the relays selected initially are bad, unstable, lower bandwidth/throughput, congestion, attackers relays etc. In addition, if the Tor client uses the same exit node and configured to use the same circuit, then the streams from many websites will passes through the same circuit. Else, in any ...


3

I don't think there's any limit other than inherited from the protocol, i.e. 2^16. The code does suggest that all stream IDs (other than 0) are acceptable for streams.


2

There is no limit to the number of streams in a circuit, but not every stream 'fits' every circuit. If a new stream needs to connect to an IP:port that your existing circuit(s) can't handle, because the exit node rejects it, you need to build a new circuit.


1

An RSS feed is no different than other web resorces: to browse it anonymously via Tor, connect to each site individually, one new circuit per site. As it stands today, RSS feed aggregators just aggregate several feeds from a user-predefined list, retrieving it in the background and presenting it in an UI. Taking e.g. Tiny Tiny RSS, an OSS self-hosted PHP ...


1

"it'll cause a major performance hit" Yes, it'll build far more circuits than are necesary and won't fix isolation problems. "make my traffic more identifiable" You'll certainly have non-standard traffic patterns. An adversary could also try to intentionally cause denial-of-service conditions by, for example making you attempt to build a circuit to every ...


1

It's questionable whether it's an improvement to the existing way that a client generates certificates. Your HAProxy is basically converting your configuration into an pre-2014 Tor circuit building process because it will likely choose a separate entryguard for each circuit. This makes it statistically less secure which is why they switched to a semi-...


1

Tor doesn't require SOCKS5 login/password authentication but it creates different circuits for each unique login/password pair. So you can just use different random login/password to authenticate against SOCKS5 proxy to isolate you streams. You doesn't even need to use SIGNAL NEWNYM, just change login/password to some random value and you will got new ...


1

I think the only way to do that is to run multiple Tor clients. Each with their own SOCKS port and their own exit node.


1

There is little Whonix specificness here. It's similar to using many torified applications on the host, then changing circuit (using Tor Browser's New Identity feature or arm) and asking "are circuits changed in all applications or only in Tor Browser?" Tor has no concept of "workstations" (neutral statement). At best it knowns that it's getting connections ...


Only top voted, non community-wiki answers of a minimum length are eligible