Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Hot answers tagged

10

You're right in some ways, but wrong on many key details. Tor is not simply a browser: Through Tor Browser is a product of the Tor Project, it is not itself Tor. Tor is the piece of software that runs the "The Onion Router" network of connected Tor nodes. Tor Browser utilizes the Tor software to rout network requests over the Tor network. There actually ...


5

Yes - the surrounding details about this are desribed in the General FAQ You should hide the list of Tor relays, so people can't block the exits. There are a few reasons we don't: We can't help but make the information available, since Tor clients need to use it to pick their paths. So if the "blockers" want it, they can get it anyway. ...


4

Setting up an account on Wikipedia does not necessarily lead to pseudonomymizing. The idea behind that is not to link your account to your real ID, but rather to link your account to your behavior on Wikipedia, whether it is good editing, bad editing, vandalizing, or spamming. Here is an approach that would not endanger your anonymity: Access Wikipedia ...


3

Because their CDN, s1.tsuki-board.net, blocks Tor connections with a captcha. Theoretically if you visit http://s1.tsuki-board.net alone and solve the captcha, you should have the home site working. It usually works this way, but I don't know why it is not for this website. Static contents still return 403 when loaded on the main site, while loads fine ...


3

Your calculation is not fully correct. The hidden service address is encoded in Base32, which means there are 32 characters available. So there are 32^16=1.208925819614629174706176×10^24 addresses available. Even if you assume that someone has 10 billion machines and each machine needs a second for a test the whole experiment would need nearly four million ...


2

NameVirtualHost 127.0.0.1:6666 Listen 127.0.0.1:6666 Your server listens to port 6666 .. HiddenServicePort 6666 127.0.0.1:7777 .. but your Tor tries to connect to 7777 You should change your HiddenServicePort directive to HiddenServicePort 6666 127.0.0.1:6666 or even HiddenServicePort 80 127.0.0.1:6666 (in this case, you don't have to put a port ...


2

7100 sounds about right for the number of hidden web services that are up at any given time. It actually sounds a bit high. The 30K from Tor metrics are the aggregate data from HSDirs. The fact that a hidden service is hosted/registered on the Tor network does not mean that it points to an actual live server. 'Scanning' all possible addresses is not the ...


2

This is not currently supported by Tor or the Tor Browser. You will most likely have to come up with a solution yourself. A workaround might be pointing Tor Browser at your proxychained Tor.


2

There is a thread on the Webroot forums about this, and here's an official answer from December 2015: Hello everyone, I just got off the phone with one of our team members that handles this and apparently torproject.org is classified as a 10 in our system as opposed to an 81 which is what I saw. The reason for this is because it is considered a proxy,...


2

[waves] Facebook-over-Tor-geek here. It's a toughie, the cleanest thing is to use the same SSL certificate in your clearnet and onion sites, but this only will work if you can use EV certificates on both. Facebook currently (March 2016) uses DV certificates for our main site - mostly because EV certificates don't currently support wildcards for clearnet ...


1

Yes... Two ways. Since on most installs, only the TorBrowser goes through Tor, just open google in chrome. If you don't like [1] you could install FoxyProxy and configure a rule to bypass the Tor Proxy (127.0.0.1:9050) when connected to https://*.google.com Just use duckduckgo since it works with Tor anyway. My opinion is that [1] is far better than [2], ...


1

This site and many others show advertisement. The task of Tor Browser is to make sure that those sites can't access your information. So they can't access cookies which come from other tabs or sessions. So using Tor Browser strengthens your anonymity. When you close the browser and re-enter the website, it looks a new visitor went to the site. This is ...


1

I tested right now ( ͡° ͜ʖ ͡°) and the website just appear the exit node location, are you sure your connection did not coincidentally fall into an exit-node of your own country?


1

The configuration of your Tor Onion Service and of your webserver are two separate things. When you want to start a Tor Onion Service you configure your webserver. That especially means set up a document root. This is the directory where the files live that your webserver should serve. configure Tor as Tor Onion Service. Here you set the option for the ...


1

You could simply try searching for the address on a search engine that indexes .onions which should give you an idea of what the site is about. If that doesn't work: Since your concern seems to be about downloading illegal images, you might want to simply block images from loading while visiting that site. This can be done in Firefox's about:config by ...


1

If everything is working as intended, then NO, the .onion website owner Cannot see a visitor IP address. Most leaks, such as from insecure plugins would be unable to reveal your IP to a .onion site either, as they would involve sending traffic over clearnet which is unable to reach a .onion site. There are some situations where bittorrent traffic, which ...


1

The site seems broken, accidentally. The way it's using Cloudflare breaks it for any IP that has some high "risk" score in their listing (I.E. any that would be prompted with a captcha before proceeding). When you use the site you are first asked to fill in a Cloudflare captcha. Once it's successfully filled in Cloudflare assigns you some token in a cookie ...


1

Don't know if it's related, but the same issue seems to happen to me sometines. Simply changing identity works for me, tapping the round arrow in the notification or restarting orbot. Hope this helps


1

Take a look at the Contact page. Your best bet would probably either be the IRC channel, or to Tweet them.


1

If they're only looking at your network traffic then they would know you are using Tor. They wouldn't be able to know what your traffic contained or where it was sent to or received from but they could estimate how much traffic you've sent and received and when. This all depends on you owning the hardware and operating system that Tor Browser is running on....


1

Tor won't prohibit them from having their intentions, but it will disarm a lot of their tools and approaches : they will simply be unable to circumvert your traffic in many ways and using certain methods. The exceptions you're concerned about do not exist, but if in your locality will be more people using Tor - a Tor network will work for all of you a bit ...


1

Could they have made a scan of all the .onion websites in 3 hours? It is impossible in the way of brute-force attack. Because you can not check all possible variants of .onion's names. It is too many at the First and at the Second - Tor's bandwidth simply will do not give you a chance for this. You must remember, it is not an Internet, it is much-much ...


1

Yes, that is true. Tor is designed so that web site operators who wish to block access through Tor can do so relatively easily.


1

In that scenario, the service is not really hidden, as it would probably be easy to figure out that the clearnet site and the hidden service are the same. It is accessible through Tor as a .onion address, so people can visit your site anonymously. You can turn any web server into a hidden service. Or rather: you can point a Tor HS at any web server. You don'...


1

The 'One More Step' page is from CloudFlare, a hosting provider. (See https://www.cloudflare.com/) The 404 indicates that the URL you visit points to something that doesn't exist. Now since the same URL works on 'normal' browsers, it is possible that the web site doesn't correctly handle when clients won't run scripts or accept 3rd party cookies.


1

Using Tor, or conecting to the Tor network, does not bring any danger in and of itself. Tor is just a tool. (You've been researching so you know what it does and how.) If you know exactly where to go, then using Tor to go there is not unsafe. Not less safe than it would be if Tor weren't required anyway. That said, and regardless of Tor or whatever other ...


1

All details can be found in the bug report #13332. The problems comes from the Secure Cookie Management of NoScript. The default installation leaves this to false, while Tor Browser sets it to true. This way not all cookie go along their way and the user can't login. The NoScript FAQ recommends to either disable Secure Cookie Managment for this site or to ...


Only top voted, non community-wiki answers of a minimum length are eligible